RedSun, yet another Defender 0-day

Just incredible work here from Redmond.

3 Likes

The cloudfiles dll has only been called once in my environment in the last six months, and seems like a pretty high fidelity detection. I’ll post more tomorrow when Im back at my work machine.

2 Likes