WMI Event Consumer Created Named Pipe

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects the WMI Event Consumer service scrcons.exe creating a named pipe