THOR with Microsoft Defender for Endpoint

This documentation is intended to provide guidance on how to use THOR with Microsoft Defender for Endpoint. We will provide a few different ways download and execute THOR on your endpoints via Microsoft Defender for Endpoint.

Contents:

• 1. Requirements
  • 1.1. Supported Operating Systems
  • 1.2. Enable "Live Response" Feature
  • 1.3. Hardware Requirements
  • 1.4. Network Connections
• 2. THOR Seed
  • 2.1. Download THOR Seed using Voucher Trials
  • 2.2. Download THOR Seed in Customer Portal
  • 2.3. Configure THOR Seed (Optional)
  • 2.4. Start a Live Response Session
  • 2.5. Upload THOR Seed
  • 2.6. Run THOR Seed
  • 2.7. Interrupted THOR Seed Sessions
  • 2.8. Retrieve the Results
  • 2.9. Cleanup
• 3. THOR Cloud
  • 3.1. Download THOR Cloud Launcher Script
  • 3.2. Start a Live Response Session
  • 3.3. Upload THOR Cloud Launcher
  • 3.4. Run THOR Cloud Launcher
• 4. FAQs
  • 4.1. THOR Seed
• 5. Links and References

Indices and tables

• Search Page