GreenPlasma Malicious Named Pipe Creation

Detects the creation of the specific named pipe 'GreenPlasmaSystemPipe' used for SYSTEM token impersonation. This is an explicit Indicator of Compromise (IOC) from the default GreenPlasma payload.