PowerShell Reflective .NET Assembly Load via Assembly.Load()

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•2

Detects the use of PowerShell commands that reflectively load assemblies into memory, often associated with obfuscated or encoded payloads typically used in fileless malware execution and post-exploitation activity.