Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.
-
Updated
May 5, 2026
Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.
Password Recovery Tool Based on CopyFail and RedSun as Main Exploits
RedSun but with CI/CD on GitHub and changed hash for bypassing purposes (AI SLOP)
Add a description, image, and links to the redsun topic page so that developers can more easily learn about it.
To associate your repository with the redsun topic, visit your repo's landing page and select "manage topics."