Daniel Bohannon is a Senior Incident Response Consultant at MANDIANT with over seven years of operations and information security experience. He is the author of Invoke-Obfuscation, Invoke-CradleCrafter, and Revoke-Obfuscation PowerShell frameworks. His research focus is developing new PowerShell obfuscation, evasion, and detection techniques at the host- and network- levels.
Revoke-Obfuscation: PowerShell Obfuscation Detection (And Evasion) Using Science