Hijacking .NET to Defend PowerShell. - Amanda Rousseau (CoRR, 2017)