Overview
The NamedPipes command enumerates named pipes on the system, including their security descriptors and associated processes. Named pipes are used for inter-process communication and can be targets for privilege escalation or lateral movement attacks.Syntax
This command does not support remote execution.
Output
Returns named pipe information:- Pipe name
- Security descriptor (SDDL)
- Associated process ID
- Process name
- Access control information
Use Cases
- Red Team
- Blue Team
- Identify named pipes for privilege escalation
- Find impersonation opportunities
- Discover service communication channels
- Locate weakly protected pipes
- Identify C2 communication channels
Example Output
Remote Execution
Detection Considerations
Low detection risk - enumerates local named pipes.
Related Commands
- Processes - Running processes
- Services - Windows services
- TcpConnections - Network connections