A Hunting Story - Recorded Future

The trend of increasing PowerShell command references specifically using “hidden” and “nop” attributes is a useful ... It is impractical to list all of the possible PowerShell options potentially used by adversaries, but the “Invoke-Expression” cmdlet was specifically referenced in the aforementioned law enforcement bulletin ... ................
................