Dylan's Blog DSCourier: Weaponizing DSC via WinGet COM API for EDR Evasive Execution Table of Contents Introduction What is WinGet? WinGet as a PowerShell Execution Proxy The Limitations of Using winget.exe Directly Building YAML Payloads Removing winget.exe from the Equation How the COM API Technique Works The Interop Layer What the Process…