THOR APT Scanner

Description

THOR APT Scanner is a highly flexible and portable tool designed for compromise assessments and forensic analysis. It uses thousands of handcrafted YARA signatures, Sigma rules, and anomaly detection rules to uncover traces of hacking activity, tampered system files, and obfuscated malware.

Key Differentiators

• Portable design allows deployment without a permanently running agent.
• More than 30,000 handcrafted YARA signatures and 4,000 Sigma rules.
• Scans files, registry hives, event logs, crash dumps, and more using modular architecture.

Features

• Portable compromise assessment scanner for Windows, macOS, and Linux.
• Handcrafted YARA and Sigma rules for high-sensitivity threat detection.
• Scans registry hives, event logs, crash dumps, and other system artifacts.
• Flexible deployment options including PowerShell scripts and software management solutions.

Use Cases

• Perform distributed scans from a single privileged Windows machine.
• Investigate forensic images during incident response.
• Integrate into malware analysis pipelines for enhanced detection.

Pricing

Deployment & Platforms

Integrations

Compliance

Target Market

Contacts