PowerShell Reflective .NET Assembly Load (LausivLoader)

Ibrahim Saud@tektrix

•updated Sep 20, 2026•1•0•5

Detects the use of PowerShell to load .NET assemblies into memory using System.Reflection.Assembly::Load combined with indicators often associated with fileless payload execution, such as GZip decompression, AES decryption, or method invocation (EntryPoint.Invoke, GetType).