Agent for Visual Studio Live Share (Code Collaboration)
vsls-agent.exe --agentExtensionPath c:\path\to\payload.dll
Load a library payload using the --agentExtensionPath parameter (32-bit)
Execute proxied payload with Microsoft signed binary
c:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\Common7\IDE\Extensions\Microsoft\LiveShare\Agent\vsls-agent.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/6312dd1d44d309608552105c334948f793e89f48/rules/windows/process_creation/proc_creation_win_vslsagent_agentextensionpath_load.yml
Jimmy (@bohops)