https://github.com/osquery/osquery logo
l

lightblue

07/02/2020, 7:58 AM
how can I find this "\\.\pipe\shell.em" pipe on windows?
t

Tao Jiang

07/02/2020, 12:04 PM
Use https://stackoverflow.com/questions/258701/how-can-i-get-a-list-of-all-open-named-pipes-in-windows. I found it is easier to launch osqueryi/osqueryd with known socket name. --extensions_socket=\\.\my_own_osquery.em
👍 1
4 Views