The below are slides from a fifteen minute lightening talk I gave yesterday on detection opportunities for implant framework behaviour on Windows.