Metasploit GetSystem Privilege Escalation via Named Pipe
Detects a command-line pattern associated with the Metasploit 'getsystem' command. This technique involves echoing a string into a named pipe to elevate privileges to SYSTEM, often executed via a newly created service.
Microsoft Sentinel (KQL)

