Abusing WinML for In-Memory Staging and EDR Evasion

https://hxr1.ghost.io/abusing-winml-for-in-memory-staging-and-edr-evasion/