PsExec Default Named Pipe Creation
Detects the creation of the default named pipe '\PSEXESVC' which is commonly used by PsExec for remote service execution. This pipe is created when PsExec attempts to establish a service on a remote system to execute commands.
Sigma
