Event ID 17

Named pipe is created

Source:

Microsoft-Windows-Sysmon

Category:

Pipe Created (rule: PipeEvent)

Pipe Created:
    RuleName: %1!s!
    EventType: %2!s!
    UtcTime: %3!s!
    ProcessGuid: %4!s!
    ProcessId: %5!s!
    PipeName: %6!s!
    Image: %7!s!
    User: %8!s!

This event generates when a named pipe is created. Malware often uses named pipes for interprocess communication.

LEFT/RIGHT arrow keys for navigation

Back to List