VS Code Silent .vsix Install Bypassing Workspace Trust Prompt
Detects the installation of Visual Studio Code extensions via the command line interface using the Code.exe process. Adversaries may abuse VS Code extensions to achieve code execution or persistence by installing malicious .vsix files.
Microsoft Sentinel (KQL)
