HackTool - Koh Default Named Pipe — Detection Rule

Detects creation of default named pipes used by the Koh tool

Read the full analysis on IntelFusions