Create and deploy THOR plugins with Init, metadata.yml, and ZIP packaging.
npx skills add https://github.com/NextronSystems/thor-skill --skill thor-plugins
Please help me install this Agent Skill. Skill: thor-plugins Source: https://github.com/NextronSystems/thor-skill/tree/main/thor-plugins Command: npx skills add https://github.com/NextronSystems/thor-skill --skill thor-plugins
Create and deploy THOR plugins to extend the scanner's capabilities.
Create a THOR plugin by implementing Init, add a metadata.yml, package as a ZIP, copy to THOR's plugins directory, and run THOR to load it.
High-intent search queries and answers about installing and using this skill.
Create custom YARA hooks by implementing a THOR plugin with a defined Init entry point. Package the plugin as a ZIP file containing a metadata.yml file, then deploy it into the THOR plugins directory to load your custom detections.
Packaging a THOR plugin requires a ZIP archive containing a metadata.yml file and an optional vendor/ directory. You deploy the plugin by copying this ZIP file into the THOR scanner's plugins directory and running THOR to load it.
Yes, you can extend the THOR scanner's capabilities by building custom parsers and post-processing integrations. The plugin development workflow enforces a standard structure with an Init entry point for THOR v11 and later versions.
No external dependencies are required for THOR plugin development. The workflow enforces a standard plugin structure and packaging process that relies solely on implementing the Init entry point and creating a metadata.yml file.
The best way to extend THOR scanner capabilities is by creating and deploying custom plugins. You implement an Init function, package the code as a ZIP with metadata.yml, and copy it to the THOR plugins directory to load your detections.
You should not use the standard THOR plugin packaging workflow if you are developing for THOR versions older than v11. The enforced plugin structure, Init entry point, and metadata.yml deployment process apply specifically to THOR v11 and later.
vankichiInitialize Go projects with go.mod, directory structure, and linting configuration.
Nextron-LabsWrite and deploy Go-based THOR plugins to extend scanner capabilities.
NextronSystemsOrchestrates deployment of Threat Intelligence signatures for the Threathunter platform.
Nextron-LabsGenerate and deploy custom THOR IOCs, YARA rules, Sigma rules, and STIX indicators.
