Powershell Token Obfuscation - Process Creation (deb9b646-a508-44ee-b7c9-d8965921c6b6)

Detects TOKEN OBFUSCATION technique from Invoke-Obfuscation

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Powershell Token Obfuscation - Process Creation (deb9b646-a508-44ee-b7c9-d8965921c6b6)	Sigma-Rules	Embedded Payloads - T1027.009 (0533ab23-3f7d-463f-9bd8-634d27e4dee1)	Attack Pattern	1
Embedded Payloads - T1027.009 (0533ab23-3f7d-463f-9bd8-634d27e4dee1)	Attack Pattern	Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a)	Attack Pattern	2