Hijacking .NET to Defend PowerShell