Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add pipe server process name #18

Open
cookpoo78 opened this issue Nov 12, 2024 · 3 comments
Open

Add pipe server process name #18

cookpoo78 opened this issue Nov 12, 2024 · 3 comments

Comments

@cookpoo78
Copy link

Great project! thank you guys <3
I think that having the server process name will be super helpful!

@g3rzi
Copy link
Collaborator

g3rzi commented Nov 12, 2024

Hi @cookpoo78 ,
thank you :)

Identifying the server process that created a named pipe can be tricky, as there isn't a straightforward place where this information is directly logged or stored.
We have the "Client PIDs" which shows who is using this pipe. This is not the best option, but it can give you a hint who created it.

I had an idea, maybe we can check that the timestamp of the handles and see when it was opened for the first time but from a quick check I saw that Windows doesn't natively track the creation timestamps of handles for named pipes.
I will check if there is other option that I am missing.

@g3rzi
Copy link
Collaborator

g3rzi commented Nov 12, 2024

There are two tools that can show you who created the named pipe but not the ones that are already created:

  • IONinja
  • NamePipeMaster - I didn't verify it, but based on its operation it seems that it should have this information.

@cookpoo78
Copy link
Author

@g3rzi Thanks for the detailed response, appreciate it :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants