.NET Loader - Reflective Assembly Load via PowerShell (T1055)

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•1

Detects PowerShell reflectively loading .NET assemblies from memory using [Reflection.Assembly]::Load to execute the compiled ClassLibrary stage filelessly.