LOTL means that the adversary is using tools already present on that computer instead of trying to download even more malware. This strategy is popular because

LOTL means that the adversary is using tools already present on that computer instead of trying to download even more malware. This strategy is popular because not writing any files makes you immune to filescanners.