Privilege Escalation via Named Pipe Impersonation

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects a remote file copy attempt to a hidden network share. This may indicate lateral movement or data staging activity.