SilentCanvas - Dynamic Payload Compilation (T1127.001)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•4

Detects PowerShell spawning csc.exe to dynamically compile the custom launcher (uds.exe) natively on the host.