Glossary
Living-off-the-Land (LotL)
An attack technique in which adversaries use legitimate, pre-installed system tools and administrative software, such as PowerShell, WMI, or PsExec, to carry out malicious activity rather than deploying custom malware. Because the tools themselves are trusted and commonly used for legitimate administration, LotL activity blends into normal traffic and is significantly harder to detect than a foreign executable.