SPECTRALVIPER XGU::Feature::Pivot Shadow named pipe lateral movement
Detects suspicious inter-process communication via named pipes and cross-process thread injection targeting known sideloading host processes, specifically associated with the SPECTRALVIPER threat activity.
Splunk (SPL)

