2. Requirements

THOR runs in any Windows, Linux and macOS environment without any further requirements. Everything needed is already included in the program package.

To use the full potential of THOR, you should execute it with administrative privileges - LOCAL_SYSTEM on Windows and root on Linux/macOS systems.

2.1. Supported

Linux

Windows

macOS

RHEL/CentOS 6

Windows 7 x86 / x64

macOS 10.14

RHEL/CentOS 7

Windows Server 2008 R2 x64

macOS 10.15

RHEL/CentOS 8

Windows 8.1

macOS 11 (Intel)

SuSE SLES 11

Windows Server 2012

macOS 11 (ARM, Apple M1)

SuSE SLES 12

Windows Server 2012 R2

SuSE SLES 15

Windows 10

Ubuntu 16 LTS

Windows 11

Ubuntu 18 LTS

Windows Server 2016

Ubuntu 20 LTS

Windows Server 2019

Ubuntu 21

Windows Server 2022

Debian 9

Debian 10

Debian 11

2.2. Limited Support

These versions are scannable with THOR Legacy. Contact us for details on how to download and use THOR Legacy.

  • Windows XP SP2 x86 (unsupported)

  • Windows XP SP2 x64 (unsupported)

  • Windows Server 2003 x86 (unsupported)

  • Windows Server 2003 x64 (unsupported)

  • Windows Server 2008 x86

  • Windows Server 2008 x64

2.3. Special Versions

We offer a special version for AIX. Only a few architectures are supported.

2.4. Unsupported

If you need to perform an analysis on unsupported operating systems or architectures, contact us for a solution using THOR Thunderstorm and Thunderstorm collectors.

We have productive setups with our customers involving the file collection from:

  • SPARC Solaris

  • RHEL Linux 4

  • Citrix Netscaler

  • ICS environments with Windows XP embedded systems (planned)

  • VMWare ESX (see this blog post)

2.5. Update Servers

To download the newest updates for THOR and our signatures, you need an active internet connection. The endpoint performing the update needs to reach our update servers to do this.

For a detailed and up to date list of our update and licensing servers, please visit https://www.nextron-systems.com/hosts/.

Hint

You do not need an active internet connection to scan an endpoint. This is only needed if you want to update to the latest THOR or signature versions.