Living off the Land — Living off the land describes attackers’ use of legitimate tools and existing system capabilities for malicious purposes. Familiar utilities help the activity blend into ordinary operations. Defenders examine context and behavior because the presence of an approved tool does not establish legitimate use. – Attack Technique

Added October 7, 2026