thor-maintenance

To update THOR in an air-gapped environment, you download offline packs using thor-util and apply them to the isolated system. This process refreshes commercial signatures and upgrades THOR binaries while preserving existing configuration settings.

Yes, you can integrate YARA-Forge rules alongside commercial THOR signatures. The maintenance workflow manages YARA-Forge updates through thor-util, ensuring custom and community rules remain current with commercial detections.

Upgrading THOR binaries preserves your existing configuration settings. The maintenance process ensures that user configurations are maintained across upgrades, allowing you to update THOR versions without losing customized deployment settings.

The best way to generate maintenance reports is using thor-util to automate the reporting process across various THOR versions. This provides a consolidated view of signature updates, binary upgrades, and offline pack downloads across environments.

Yes, you need thor-util installed to perform offline updates and signature refreshes. Thor-util is required for all THOR maintenance operations, including downloading offline packs, upgrading binaries, and managing YARA-Forge integrations.