Red teams have been using CLR Hosting to reflectively load .NET tools for a long time now. Historically this has meant using the deprecated ICorRuntimeHost interface to start the CLR, and subsequent ...