First Time Seen Remote Named Pipe - Zeek

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

This detection excludes known namped pipes accessible remotely and notify on newly observed ones, may help to detect lateral movement and remote exec using named pipes