This talk will demonstrate, live and in real-time, a defender and attacker playing a game of whack-a-mole using “living off the land” approaches both defensively and offensively. The talk will demonstrate how free Microsoft tools can be used to build a robust defense framework capable of detecting new and stealthy attacks.