Files
mandiant-capa-rules/communication/named-pipe/create