Invoke-Obfuscation Obfuscated IEX Invocation - System (51aa9387-1c53-4153-91cc-d73c59ae1ca9)
Detects all variations of obfuscated powershell IEX invocation code generated by Invoke-Obfuscation framework from the code block linked in the references
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) | Attack Pattern | Invoke-Obfuscation Obfuscated IEX Invocation - System (51aa9387-1c53-4153-91cc-d73c59ae1ca9) | Sigma-Rules | 1 |