Red and Blue cyberdefense teams provide valuable cybersecurity assessment services to help prevent and defend against malicious intruders. Through interviews, we investigated the methods, tools, and challenges of two specific US Government Department of Defense Red and Blue teams and how they work together during integrated operations. We found examples of successful integration, as well as opportunities for enhanced, shared situation awareness. Based on these findings, we discuss design implications for tools that can facilitate situation awareness among multiple cyberdefense teams by supporting data fusion, change detection, network mapping, and access tracking.