The attackers used process hollowing against RegAsm.exe, patched Windows defenses such as AMSI and ETW and unpacked further ...
I replaced all my bash scripts with Python. Here’s what improved, what broke, and why the switch changed my workflow.