Communication with Processes

Enumerating Network Services

Most common way to interact with processes is through a network socket (DNS, HTTP, SMB, etc.).

Display Active Network Connections

C:\xyz> netstat -ano

---

Named Pipes

Listing Named Pipes with Pipelist

C:\xyz> pipelist.exe /accepteula

PowerShell to list named pipes using gci (Get-ChildItem).

PS C:\xyz>  gci \\.\pipe\

Reviewing LSASS Named Pipe Permissions

C:\xyz> accesschk.exe /accepteula \\.\Pipe\lsass -v