2. Requirements

THOR runs in any Windows, Linux and macOS environment without any further requirements. Everything needed is already included in the program package.

For best results, it is necessary to run THOR with administrative privileges or LOCAL_SYSTEM on Windows and “root” on Linux/macOS systems.

2.1. Supported

  • Windows 7 x86 / x64

  • Windows Server 2008 R2 x64

  • Windows 8.1

  • Windows Server 2012

  • Windows Server 2012 R2

  • Windows 10

  • Windows 11

  • Windows Server 2016

  • Windows Server 2019

  • Windows Server 2022

  • RHEL/CentOS 6

  • RHEL/CentOS 7

  • RHEL/CentOS 8

  • SuSE SLES 11

  • SuSE SLES 12

  • SuSE SLES 15

  • Ubuntu 16 LTS

  • Ubuntu 18 LTS

  • Ubuntu 20 LTS

  • Ubuntu 21

  • Debian 9

  • Debian 10

  • Debian 11

  • macOS 10.14

  • macOS 10.15

  • macOS 11 (Intel)

  • macOS 11 (ARM, Apple M1)

2.2. Limited Support

These versions are scannable with THOR Legacy. Contact us for details on how to download and use THOR Legacy.

  • Windows XP SP2 x86 (unsupported)

  • Windows XP SP2 x64 (unsupported)

  • Windows Server 2003 x86 (unsupported)

  • Windows Server 2003 x64 (unsupported)

  • Windows Server 2008 x86

  • Windows Server 2008 x64

2.3. Special Versions

We offer a special version for AIX. Only a few architectures are supported.

2.4. Unsupported

If you need to perform an analysis on unsupported operating systems or architectures, contact us for a solution using THOR Thunderstorm and Thunderstorm collectors.

We have productive setups with our customers involving the file collection from:

  • SPARC Solaris

  • RHEL Linux 4

  • Citrix Netscaler

  • ICS environments with Windows XP embedded systems (planned)

  • VMWare ESX (see this blog post)