Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • ManageEngine Log360 Reviews & Ratings
    168 Ratings
    Company Website
  • Daylight Reviews & Ratings
    10 Ratings
    Company Website
  • NeuBird Reviews & Ratings
    2 Ratings
    Company Website
  • Blumira Reviews & Ratings
    149 Ratings
    Company Website
  • Grafana Cloud Reviews & Ratings
    850 Ratings
    Company Website
  • Guardz Reviews & Ratings
    124 Ratings
    Company Website
  • BrandMail Reviews & Ratings
    325 Ratings
    Company Website
  • ManageEngine ADAudit Plus Reviews & Ratings
    522 Ratings
    Company Website
  • anny Reviews & Ratings
    114 Ratings
    Company Website
  • AI Docs Reviews & Ratings
    15 Ratings
    Company Website

What is THOR?

THOR distinguishes itself as the premier and most versatile instrument for conducting compromise assessments. In the wake of cyber incidents, teams often find themselves sifting through a multitude of compromised devices alongside a wider spectrum of potentially affected systems, which renders the manual analysis of countless forensic images an overwhelming endeavor. By utilizing THOR, the forensic analysis process is significantly enhanced due to its formidable collection of over 12,000 expertly designed YARA signatures, 400 Sigma rules, various anomaly detection methods, and a myriad of indicators of compromise (IOCs). This powerful tool is specifically engineered to highlight suspicious activities, alleviate the workload on analysts, and speed up the forensic examination process during critical instances when swift results are essential. Additionally, by focusing on aspects frequently neglected by conventional antivirus solutions, THOR boasts an expansive signature library that includes a diverse array of YARA and Sigma rules, IOCs, as well as checks for rootkits and anomalies, effectively tackling a broad spectrum of threats. Beyond merely detecting backdoors and tools utilized by attackers, THOR also captures outputs, temporary files, system configuration changes, and other remnants of malicious activities, thereby providing a comprehensive view of the incident landscape. The all-encompassing nature of THOR not only enhances detection but also fosters a deeper understanding of threats, establishing it as an indispensable tool in the cybersecurity field. Ultimately, its ability to adapt and evolve with emerging threats ensures that security teams are better equipped to respond effectively.

What is Cyber Triage?

Forensic tools designed for rapid and cost-effective incident response enable swift, comprehensive, and straightforward investigations of intrusions. When an alert is triggered by a Security Information and Event Management (SIEM) system or an Intrusion Detection System (IDS), a Security Orchestration, Automation, and Response (SOAR) platform is employed to kick-start an investigation at the endpoint. The Cyber Triage software then gathers crucial data from the compromised endpoint, which analysts utilize to identify evidence and make informed decisions. In contrast to the manual incident response process, which is often sluggish and leaves organizations vulnerable to threats, Cyber Triage automates each phase of the endpoint investigation, ensuring efficient and effective remediation. As cyber threats are ever-evolving, relying on manual responses can lead to inconsistencies or gaps in security. With Cyber Triage's continuous updates incorporating the latest threat intelligence, it meticulously examines every aspect of affected endpoints. While some forensic tools may prove complicated and lack essential features for intrusion detection, Cyber Triage stands out with its user-friendly interface, allowing even less experienced staff members to analyze data and produce detailed reports. This ease of use not only enhances efficiency but also empowers junior analysts to contribute meaningfully to the incident response process.

Media

Media

Integrations Supported

Elastic Security
IBM Cloud
IBM QRadar SIEM
Mesh
Microsoft Defender for Endpoint
SentinelOne Singularity
Splunk Cloud Platform
Splunk SOAR
Swimlane

Integrations Supported

Elastic Security
IBM Cloud
IBM QRadar SIEM
Mesh
Microsoft Defender for Endpoint
SentinelOne Singularity
Splunk Cloud Platform
Splunk SOAR
Swimlane

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

$2,500
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

Nextron Systems

Date Founded

2017

Company Location

Germany

Company Website

www.nextron-systems.com/thor/

Company Facts

Organization Name

Sleuth Kit Labs

Date Founded

2023

Company Location

United States

Company Website

www.cybertriage.com

Categories and Features

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Categories and Features

Incident Response

Attack Behavior Analytics
Automated Remediation
Compliance Reporting
Forensic Data Retention
Incident Alerting
Incident Database
Incident Logs
Incident Reporting
Privacy Breach Reporting
SIEM Data Ingestion / Correlation
SLA Tracking / Management
Security Orchestration
Threat Intelligence
Timeline Analysis
Workflow Automation
Workflow Management

Popular Alternatives

ASGARD Management Center Reviews & Ratings

ASGARD Management Center

Nextron Systems

Popular Alternatives

ListSync Reviews & Ratings

ListSync

ThorApps
Binalyze AIR Reviews & Ratings

Binalyze AIR

Binalyze
Cado Reviews & Ratings

Cado

Cado Security
Alisha AI SDR Reviews & Ratings

Alisha AI SDR

floworks
Falcon Forensics Reviews & Ratings

Falcon Forensics

CrowdStrike