TLDR InfoSec · STRATEGIES & TACTICS

THREAT HUNTING - SUSPICIOUS NAMED PIPES

links.tldrnewsletter.com17 min read

Summary from the TLDR InfoSec newsletter

This blog post discusses how Named Pipes can be used by attackers for Command and Control and how defenders like EDRs can detect these usages. Attackers can exploit named pipes to move laterally within a network. Monitoring named pipe creation and communication patterns can help detect malicious activities.