SANS Advanced Incident Response, Threat Hunting, and Digital Forensics (FOR508) Practice test

Living off the Land Binaries are legitimate system tools that attackers can repurpose, and the LOLBAS project exists to document and catalog these binaries, including what they can do and how they’re abused. That relationship is why this statement is the best: LOLBAS is specifically the cataloging effort for the binaries that make up LOLBins. The other options are inaccurate because LOLBIN refers to the binaries themselves (not antivirus software), LOLBAS is not unrelated, and its scope is focused on documenting these binaries rather than implying a broader catalog beyond them.