Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
pipes
pipes
Named pipes in Windows can be used to provide communication between processes on a computer or between processes on different computers across a network. The pipes osquery table lists the named pipes currently running on a Windows computer.
| Column | Type | Description |
|---|---|---|
| flags | text | The flags indicating whether this pipe connection is a server or client end, and if the pipe for sending messages or bytes |
| instances | integer | Number of instances of the named pipe |
| max_instances | integer | The maximum number of instances creatable for this pipe |
| name | text | Name of the pipe |
| pid | bigint | Process ID of the process to which the pipe belongs |
Example
This query displays all attributes (columns) for the named pipe enabled by opening PowerShell:
SELECT * FROM pipes WHERE name LIKE '%powershell';Notes
Running the following command at a prompt in PowerShell lists the named pipes currently open on a Windows computer:
PS C:\Windows\System32> get-childitem \\.\pipe\Links:
- Microsoft documentation on named pipes
- Discover files linked to processes with Windows Process Explorer
- Windows PowerShell
Edit page
Ask us anything
Questions?
SOC2 Type 2
© 2025 Fleet Inc.
Privacy
