2. Requirements
THOR runs in any Windows, Linux and macOS environment without any further requirements. Everything needed is already included in the program package.
To use the full potential of THOR, you should execute it with administrative
privileges - LOCAL_SYSTEM
on Windows and root
on Linux/macOS
systems.
2.1. Operating Systems
The following operating systems and their versions are the minimum requirements to run THOR. Any newer version will also work with THOR.
Linux |
Windows |
macOS |
---|---|---|
RHEL/CentOS 6 |
Windows 7 x86/x64 |
macOS 10.14 (Mojave) |
SuSE SLES 11 |
Windows Server 2008 R2 |
macOS 11 (Intel) |
Ubuntu 16 LTS |
macOS 11 (ARM, Apple M1) |
|
Debian 9 |
2.1.1. Limited Support
These versions are scannable with THOR Legacy. The legacy version of THOR is usually running on those systems, but if you encounter any problems, we will not be able to fix them. Contact us for details on how to download and use THOR Legacy.
OS |
Architecture |
Support |
---|---|---|
Windows XP SP2 |
x86 and x64 |
no |
Windows XP SP3 |
x86 and x64 |
no |
Windows Server 2003 |
x86 and x64 |
no |
Windows Server 2003 SP1 |
x86 and x64 |
no |
Windows Server 2003 SP2 |
x86 and x64 |
no |
Windows Server 2008 |
x86 and x64 |
yes |
2.1.2. THOR for AIX
We offer a special version for AIX. Currently only a small number of versions are supported. We are extensively testing THOR on AIX 7.2 with Power7/Power8. THOR for AIX will not run on older versions of AIX. If you are running a newer version and are interested in THOR for AIX, we can always provide a test license to verify if everything is working as expected.
2.1.3. Unsupported
VMWare ESX - https://kb.vmware.com/s/article/1036544
many others
If you need to perform an analysis on unsupported operating systems or architectures, contact us for a solution using THOR Thunderstorm and Thunderstorm collectors.
We have productive setups with our customers involving the file collection from:
SPARC Solaris
RHEL Linux 4
Citrix Netscaler
ICS environments with Windows XP embedded systems (planned)
VMWare ESX (see this blog post)
2.2. Update Servers
To download the newest updates for THOR and our signatures, you need an active internet connection. The endpoint performing the update needs to reach our update servers to do this.
For a detailed and up to date list of our update and licensing servers, please visit https://www.nextron-systems.com/hosts/.
Hint
You do not need an active internet connection to scan an endpoint. This is only needed if you want to update to the latest THOR and signature versions. There are special licenses for special circumstances, for example when the licensed system does not have internet access.