Invoke-Obfuscation CLIP+ Launcher - PowerShell

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•17

Detects obfuscated PowerShell execution leveraging `clip.exe` to retrieve commands from the clipboard. This technique is often used for defense evasion to hide malicious scripts.