Prinz Eugen Ransomware Shared Memory Access
Detects processes associated with Prinz Eugen ransomware attempting to access shared memory, mailslots, named pipes, or create file mappings. This behavior is indicative of inter-process communication mechanisms often used by malware for various purposes, including data exfiltration, command and control, or privilege escalation.
Microsoft Sentinel (KQL)

