AnyDesk adprinterpipe Named Pipe Creation for COM Printer Impersonation LPE

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

This rule monitors for the creation of the 'adprinterpipe' named pipe by the AnyDesk remote support application. This behavior can be indicative of remote session activity or misuse of the AnyDesk software, often used as a vector for remote command and control.