Invoke-Obfuscation Via Use Clip - PowerShell Module — Detection Rule

Detects Obfuscated Powershell via use Clip.exe in Scripts

Read the full analysis on IntelFusions