CobaltStrike Named Pipe (d5601f8c-b26f-4ab0-9035-69e11a8d4ad2)
Detects the creation of a named pipe as used by CobaltStrike
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Process Injection - T1055 (43e7dc91-05b2-474c-b9ac-2ed4fe101f4d) | Attack Pattern | CobaltStrike Named Pipe (d5601f8c-b26f-4ab0-9035-69e11a8d4ad2) | Sigma-Rules | 1 |