LOLBAS

Living Off The Land Binaries and Scripts (LOLBAS) refers to the use of legitimate, pre-installed operating system tools and programs for malicious purposes. Instead of introducing new malware, attackers leverage these existing, trusted binaries to perform actions such as downloading files, executing code, or gathering information, often evading traditional security defenses that focus on detecting malicious software.

Visit the following resources to learn more:

• @official@LOLBAS Project
• @article@Understanding the risks of LOLBAS in security
• @video@LOLBAS T1105, MS Process Abuse