Report: we’ll know antivirus is dead when it goes quiet

#### Executive summary SentinelOne's Enterprise Risk Index reports a marked increase in file-less, in-memory attacks (rising from ~7% to ~16%) while file-based incidents declined, with adversaries leveraging native Windows components (PowerShell, WMI, cmd.exe) to execute and persist without writing payloads. The article warns this trend undermines signature-based antivirus and network detection, notes lower submit/detection rates to services like VirusTotal, and describes how both sophisticated APTs and lower-skilled criminal groups/malware families are adopting these tactics.