CobaltStrike Named Pipe Pattern Regex (0e7163d4-9e19-4fa7-9be6-000c61aad77a)
Detects the creation of a named pipe matching a pattern used by CobaltStrike Malleable C2 profiles
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | CobaltStrike Named Pipe Pattern Regex (0e7163d4-9e19-4fa7-9be6-000c61aad77a) | Sigma-Rules | 1 |