Suspicious PowerShell IEX Execution Patterns

SigmaHQ Detections@sigmaHQ

•updated Nov 28, 2022•0•0•0

Detects suspicious ways to run Invoke-Execution using IEX alias