CobaltStrike Named Pipe Pattern Regex — Detection Rule

Detects the creation of a named pipe matching a pattern used by CobaltStrike Malleable C2 profiles

Read the full analysis on IntelFusions