Yes exactly, fileless malware generally means injecting code into existing trusted processes, which makes it extremely difficult to detect. If your malware can

Yes exactly, fileless malware generally means injecting code into existing trusted processes, which makes it extremely difficult to detect. If your malware can be detected by a simple real-time AV scanner which just hooks file I/O, it definitely isn't fileless.