LoFP / t1559

t1559

Title	Tags
automation tool might use anonymous pipe for task orchestration or process communication.	t1559 endpoint splunk
legitimate cmstp use (unlikely in modern enterprise environments)	t1218 t1218.003 t1548 t1548.002 t1559 t1559.001 windows sigma
processes such as ms office using ieproxy to render html content.	t1071 t1559 windows elastic