2. Requirements

THOR runs in any Windows, Linux and macOS environment without any further requirements. Everything needed is already included in the program package.

For best results, it is necessary to run THOR with administrative privileges or LOCAL_SYSTEM on Windows and root on Linux/macOS systems.

2.1. Supported

Linux

Windows

macOS

RHEL/CentOS 6

Windows 7 x86 / x64

macOS 10.14

RHEL/CentOS 7

Windows Server 2008 R2 x64

macOS 10.15

RHEL/CentOS 8

Windows 8.1

macOS 11 (Intel)

SuSE SLES 11

Windows Server 2012

macOS 11 (ARM, Apple M1)

SuSE SLES 12

Windows Server 2012 R2

SuSE SLES 15

Windows 10

Ubuntu 16 LTS

Windows 11

Ubuntu 18 LTS

Windows Server 2016

Ubuntu 20 LTS

Windows Server 2019

Ubuntu 21

Windows Server 2022

Debian 9

Debian 10

Debian 11

2.2. Limited Support

These versions are scannable with THOR Legacy. Contact us for details on how to download and use THOR Legacy.

  • Windows XP SP2 x86 (unsupported)

  • Windows XP SP2 x64 (unsupported)

  • Windows Server 2003 x86 (unsupported)

  • Windows Server 2003 x64 (unsupported)

  • Windows Server 2008 x86

  • Windows Server 2008 x64

2.3. Special Versions

We offer a special version for AIX. Only a few architectures are supported.

2.4. Unsupported

If you need to perform an analysis on unsupported operating systems or architectures, contact us for a solution using THOR Thunderstorm and Thunderstorm collectors.

We have productive setups with our customers involving the file collection from:

  • SPARC Solaris

  • RHEL Linux 4

  • Citrix Netscaler

  • ICS environments with Windows XP embedded systems (planned)

  • VMWare ESX (see this blog post)