How does Covenant launch its Grunt payload and what are some of the launcher methods?

Covenant provides 9 launcher methods for deploying Grunt, including Binary (exe), PowerShell, MSBuild, InstallUtil, Wmic, Regsvr32, Mshta, Cscript, and Wscript. Most of these store the .NET assembly in an array and load it in memory via Assembly.Load() or DotNetToJScript, avoiding disk writes. For example, the PowerShell launcher uses `[Reflection.Assembly]::Load(Data).EntryPoint.Invoke(0,$a.ToArray())`. Details can be found in the Covenant article.