Skip to content

Hide Navigation Hide TOC

Invoke-Obfuscation Obfuscated IEX Invocation - Security (fd0f5778-d3cb-4c9a-9695-66759d04702a)

Detects all variations of obfuscated powershell IEX invocation code generated by Invoke-Obfuscation framework from the code block linked in the references

Cluster A Galaxy A Cluster B Galaxy B Level
Invoke-Obfuscation Obfuscated IEX Invocation - Security (fd0f5778-d3cb-4c9a-9695-66759d04702a) Sigma-Rules Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a) Attack Pattern 1