โ† Library
sigmaDRL-1.1from SigmaHQ/sigma

Invoke-Obfuscation CLIP+ Launcher - PowerShell Module

Detects Obfuscated use of Clip.exe to execute PowerShell

Quality
92
FP risk
โ€”
Forks
0
Views
1
ATT&CK techniques
Rule source๐Ÿ”’ locked
๐Ÿ”’

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds โ€” no credit card required.

Sign in โ†’
Invoke-Obfuscation CLIP+ Launcher - PowerShell Module ยท SIGMA rule | DetectionLint