Attackers are increasingly utilising non-malware attacks in an effort to remain undetected on organisations’ endpoints.