obfuscation/encryption of the code generated ?

[enigma0x3]

obfuscation/encryption of the code generated ?

[enigma0x3]

What OS and AV are you using, along with what options within the script.

It is detected by Officescan from TrendMicro (Titanaium security) on a SMTP server and Avast in windows 8 (although it does no get directly flagged "on the fly", it is detected by automatic regular scan and individual scan). Also for a penetration test, I do not think that leaving your ip adress with a link for the well known invoke-shellcode powershell script in clear in a document is a good idea.

[enigma0x3]

Typically, on a penetration test, you are authorized to perform the attack, so leavung the IP address in the doc isn't a big deal. If anything, it should be left in there so the organization can verify the attack is yours in the event it makes it to the IR team. Obfuscating it for that purpose is a bad idea.