PowerShell Add-Type Reflective Code Loading

PowerShell Add-Type can compile a C# type into an in-memory .NET assembly and expose native calls through P/Invoke. Add-Type alone does not load or execute a payload. This entry applies to ATT&CK T1620 only when the resulting type is used to load and execute code inside the same process; otherwise PowerShell command execution is T1059.001.