Abusing WinML for In-Memory Staging and EDR Evasion

https://hxr1.ghost.io/abusing-winml-for-in-memory-staging-and-edr-evasion/

https://x.com/home/status/2042914535292522643

https://x.com/home/status/2042932198764863761

https://x.com/home/status/2042975097565384728