Skip to content
Threat Feed
Subscribe

Tag

Named-Pipe

3 briefs RSS
high advisory

Detection of Malicious Windows Named Pipe Usage

This analytic identifies the use of suspicious named pipes on Windows systems, a technique commonly leveraged by malware and post-exploitation frameworks for inter-process communication.

windows ipc post-exploitation named-pipe
1r 1t
high advisory

Privilege Escalation via Rogue Named Pipe Impersonation

An adversary may attempt privilege escalation by masquerading as a known named pipe and manipulating a privileged process to connect to it on Windows systems.

privilege-escalation named-pipe windows
2r 1t
high advisory

Privilege Escalation via Named Pipe Impersonation

Adversaries may escalate privileges by abusing named pipe impersonation, a technique often used with tools like Metasploit's meterpreter getsystem command, where a process writes to a named pipe to facilitate a SYSTEM-token handoff.

Microsoft Defender XDR +4 privilege-escalation named-pipe windows
2r 1t