redsun-bluehammer-undefend-detection-pack

RedSun、BlueHammer、UnDefend 与 CrossFamily 检测包 重要提示：本仓库中的所有代码和检测逻辑均由 AI 生成。不保证这些脚本正确、完整、安全或适用于任何环境。请完全自行承担使用这些脚本的风险。仓库作者不对因使用本内容而造成的任何损害、中断、数据丢失、误报、漏报、运营影响或其他伤害负责。在部署到任何实时生产环境之前，每份脚本都必须由合格人员审查、测试、调优和验证。 概述 本仓库 redsun-bluehammer-undefend-detection-pack 包含使用 Kusto 查询语言（KQL）编写的 Microsoft Defender XDR...

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure CVD, urging the research community to share their findings and give affected vendors an opportunity to better understand the impact and address them before they are publicly disclosed. The development comes after a...

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised systems. The activity involves the exploitation of three vulnerabilities that are codenamed BlueHammer requires GitHub sign-in, RedSun, an...