This presentation explores ‘living off the land’ and other fileless tactics and techniques used by a Chinese sponsored threat actor group targeting U.S. critical infrastructure.