Post #601 474 Jan 15, 2022, 10:01 UTC Suspicious Named Pipe Eventshttps://medium.com/falconforce/falconfriday-suspicious-named-pipe-events-0xff1b-fe475d7ebd8#windows #pipe #events #blueteam #redteam Medium FalconFriday — Suspicious named pipe events — 0xFF1B TL;DR for blue teams: Attackers use named pipes to conveniently move laterally and mostly bypass detection. This blog post shows a method…