BSidesSF 2026 - Anatomy and Defense of LOTL Fileless Intrusions (Amol Sarwate)

This talk by Amol Sarwate explores the anatomy and defense of living-off-the-land (LOTL) fileless intrusions. The speaker dissects real-world campaigns and discusses attacker techniques that leverage trusted tools and memory-resident execution to evade detection. Additionally, the session covers practical defenses, including hardening, detection, and incident response strategies aimed at reducing risk in the context of fileless malware threats.