Invoke-Obfuscation Via Stdin - System — Detection Rule

Detects Obfuscated Powershell via Stdin in Scripts

Read the full analysis on IntelFusions