CobaltStrike Named Pipe Patterns (85adeb13-4fc9-4e68-8a4a-c7cb2c336eb7)
Detects the creation of a named pipe with a pattern found in CobaltStrike malleable C2 profiles
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | CobaltStrike Named Pipe Patterns (85adeb13-4fc9-4e68-8a4a-c7cb2c336eb7) | Sigma-Rules | 1 |