threat-hunting-evasion

SUSPICIOUS：该技能与其声明目的基本一致，但其目的本身是帮助AI代理学习规避检测、绕过EDR、隐藏横向与凭据获取行为，属于面向攻击隐蔽性的高风险 offensive security 能力。未见明确凭据窃取或第三方中转外传，恶意度不足以判定为 malware，但对安全的实际风险很高。

The fragment is not itself a complete malware implementation, but it is a high-risk offensive-security guide containing a functional remote download-and-reflective-execution example and detailed instructions for evading YARA, EDR, Sysmon, AMSI, and ETW while stealing credentials. It should not be included in a normal software-supply-chain library without a clear authorized security-testing purpose. The assessment is limited to the visible fragment.