THOR Reviews

THOR Description

THOR is the most flexible and sophisticated compromise assessment tool available. Incident response engagements typically begin with a set of compromised systems and a larger group of systems that could be affected. Manual analysis of many forensic images can prove difficult. THOR accelerates your forensic analysis by providing more than 12,000 handcrafted YARA Signatures, 400 Sigma rules and many anomaly detection rules. There are also thousands of IOCs. THOR is the ideal tool to highlight suspicious elements and reduce the workload. It also speeds up forensic analysis in critical moments when quick results are crucial. THOR is a comprehensive tool that covers all the Antivirus's weaknesses. THOR has a huge signature set that includes thousands of YARA, Sigma rules, IOCs and rootkit and anomaly check. It covers all types of threats. THOR not only detects backdoors and tools used by attackers but also outputs, temporary file changes, and other traces that indicate malicious activity.