2. Requirements
THOR runs in any Windows, Linux and macOS environment without any further requirements. Everything needed is already included in the program package.
To use the full potential of THOR, you should execute it with administrative
privileges - LOCAL_SYSTEM
on Windows and root
on Linux/macOS
systems.
2.1. Supported
Linux |
Windows |
macOS |
---|---|---|
RHEL/CentOS 6 |
Windows 7 x86 / x64 |
macOS 10.14 |
RHEL/CentOS 7 |
Windows Server 2008 R2 x64 |
macOS 10.15 |
RHEL/CentOS 8 |
Windows 8.1 |
macOS 11 (Intel) |
SuSE SLES 11 |
Windows Server 2012 |
macOS 11 (ARM, Apple M1) |
SuSE SLES 12 |
Windows Server 2012 R2 |
|
SuSE SLES 15 |
Windows 10 |
|
Ubuntu 16 LTS |
Windows 11 |
|
Ubuntu 18 LTS |
Windows Server 2016 |
|
Ubuntu 20 LTS |
Windows Server 2019 |
|
Ubuntu 21 |
Windows Server 2022 |
|
Debian 9 |
||
Debian 10 |
||
Debian 11 |
2.2. Limited Support
These versions are scannable with THOR Legacy. Contact us for details on how to download and use THOR Legacy.
Windows XP SP2 x86 (unsupported)
Windows XP SP2 x64 (unsupported)
Windows Server 2003 x86 (unsupported)
Windows Server 2003 x64 (unsupported)
Windows Server 2008 x86
Windows Server 2008 x64
2.3. Special Versions
We offer a special version for AIX. Only a few architectures are supported.
2.4. Unsupported
VMWare ESX - https://kb.vmware.com/s/article/1036544
many others
If you need to perform an analysis on unsupported operating systems or architectures, contact us for a solution using THOR Thunderstorm and Thunderstorm collectors.
We have productive setups with our customers involving the file collection from:
SPARC Solaris
RHEL Linux 4
Citrix Netscaler
ICS environments with Windows XP embedded systems (planned)
VMWare ESX (see this blog post)
2.5. Update Servers
To download the newest updates for THOR and our signatures, you need an active internet connection. The endpoint performing the update needs to reach our update servers to do this.
For a detailed and up to date list of our update and licensing servers, please visit https://www.nextron-systems.com/hosts/.
Hint
You do not need an active internet connection to scan an endpoint. This is only needed if you want to update to the latest THOR or signature versions.