@vladimir

Thanks for your quick response!

So in this snapshot I went to the file ID. This should be an anonymous pipe.

while in the below snapshot, we can now the file in the first case (and the file serves as a client) As far as I undesrtand.

Are those little icons on the snapshot indicates the type of connection besides it is a pipe? (Socket, shared memory, message queue)

In case of pipe monitoring on Windows, can we know that the actually examined process what kind of IPC method it is using? (Pipe, sockets or shared memory etc.)

Sorry, if it is a trivial question!

Based on the screenshot below, there is a file being sent from the process. I would like to know which type of IPC the process was using in this case.