Massive remote service creation via named pipes - Tchopper

Detects scenarios where an attacker uses the Tchopper tool by remotely creating multiple services via named pipes.