TLDR InfoSec · STRATEGIES & TACTICS
THREAT HUNTING - SUSPICIOUS NAMED PIPES
Summary from the TLDR InfoSec newsletter
This blog post discusses how Named Pipes can be used by attackers for Command and Control and how defenders like EDRs can detect these usages. Attackers can exploit named pipes to move laterally within a network. Monitoring named pipe creation and communication patterns can help detect malicious activities.