Power Without Binaries: Bringing Native Offensive Techniques to Fileless Runtimes

About this talk

What happens when native offensive tradecraft goes fileless? This talk pushes PowerShell beyond scripting, bringing WinAPI, NTAPI, direct and indirect syscalls, and process injection into a managed runtime. Through real-world successes, failures, and a working POC, this talk explores AMSI, CLR, AV/EDR visibility, and AI-assisted development revealing just how far PowerShell can go and what defenders can do to detect it.

The speaker

• MC

  Max Covey

Where it is