Suspicious PowerShell IEX Execution Patterns — Detection Rule

Detects suspicious ways to run Invoke-Execution using IEX alias

Read the full analysis on IntelFusions