ADFS DB Suspicious Named Pipe Connection

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•0•0•0

Connection to ADFS via named pipes that are not using specific Windows ADFS processes may be indicative of user attempting to access ADFS for suspicious purposes