THOR Lite
#Operations Management#Endpoint Security
Monitor WMI consumers and processes for potential malicious activity
THOR Lite: A Free and Versatile Multi-Platform IOC and YARA Scanner
THOR Lite is a free, fast, and flexible multi-platform IOC and YARA scanner. It features modules for scanning the file system and processes, extracts information about 'autoruns', and supports custom IOCs and signatures.
It provides multiple output formats and system compatibility
It provides multiple output formats, allows for scan throttling, and is compatible with Windows, Linux, and macOS.
The scanner is developed in Go
The scanner is developed in Go, and it is pre-compiled for all major platforms. Additionally, it features an encrypted open-source signature base.
Custom Encrypted Signatures and Improved Performance
This feature allows for custom encrypted signatures and offers enhanced performance when compared to LOKI.
THOR Lite is a scaled-down version of the enterprise scanner THOR, which is available for free with a subscription to our newsletter.
