Title
#general
l

lightblue

07/02/2020, 7:58 AM
how can I find this "\.\pipe\shell.em" pipe on windows?
t

Tao Jiang

07/02/2020, 12:04 PM
Use https://stackoverflow.com/questions/258701/how-can-i-get-a-list-of-all-open-named-pipes-in-windows. I found it is easier to launch osqueryi/osqueryd with known socket name. --extensions_socket=\.\my_own_osquery.em