Invoke-Obfuscation Obfuscated IEX Invocation - PowerShell Module — Detection Rule

Detects all variations of obfuscated powershell IEX invocation code generated by Invoke-Obfuscation framework from the code block cited in the reference section below

Read the full analysis on IntelFusions