Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1027.009

Embedded Payloads

Stealth 2 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
sigma Powershell Token Obfuscation - Process Creation test 2026-03-16
sigma Powershell Token Obfuscation - Powershell test 2025-10-19