BATLoader Lurks Under PowerShell Script to Evade Detection, Launch

The researchers were able to notice the difference in the method, and how the malicious payload was being delivered using BATLoader.

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

TruKno Real-World Threat Intelligence

SafeBreach Uncovers Fully Undetectable PowerShell Backdoor

SafeBreach Uncovers Fully Undetectable PowerShell Backdoor

Web Filtering Blog

Attack and Defense Around PowerShell Event Logging - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

How malicious PowerShell scripts evade detection

SafeBreach Uncovers Fully Undetectable PowerShell Backdoor

TruKno Real-World Threat Intelligence

Zero-day flaw in Zimbra exploited by suspected Chinese threat actor. New Molerats campaign. Antlion targets financial entities in Taiwan.

Pentesting Windows environments: remote delivery of PowerShell payloads

Antivirus (AV) Bypass - HackTricks

Modifying Empire to Evade Windows Defender :: Mike Gualtieri

Evade Windows Defender PowerShell Empire agent detection, by Nol White Hat