Create and connect to a pipe (PipeEventCreate/PipeEventConnected)

What are pipes?

Pipes are used to help facilitate communication between two applications and or processes using shared memory. Microsoft Windows Pipes utilizes a client-server implementation whereby the process that creates a named pipe is known as the server and the process that communicates with the named pipe is known as the client.

PipeEventCreate

This event is logged when a named pipe is created. Malware often uses named pipes for inter-process communication.

Reference: https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon#event-id-17-pipeevent-pipe-created

PipeEventConnected

This event is logged when a named pipe connection is made between a client and a server.

Reference: https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon#event-id-18-pipeevent-pipe-connected

*No entries were found in PipeCreated & PipeConnected. This doesn't seem to be a common method used by processes.