LOLBin

A Living off the Land Binary is a legitimate, often signed, operating system executable that attackers repurpose for malicious ends, such as downloading payloads or executing scripts. Since these binaries are trusted parts of the OS, their abuse can bypass application allowlists and evade detection. Defenders track known LOLBins and monitor for unusual ways they are invoked.