Glossary: Endpoint, Application and Email Security

living off the land

An attack that uses only tools already on the system, such as PowerShell or WMI, so antivirus finds no bad file. EDR catches it from the chain of behavior.