Write and deploy Go-based THOR plugins to extend scanner capabilities.
npx skills add https://github.com/Nextron-Labs/thor-skill --skill thor-plugins-nextron-labs
Please help me install this Agent Skill. Skill: thor-plugins Source: https://github.com/Nextron-Labs/thor-skill/tree/main/thor-plugins Command: npx skills add https://github.com/Nextron-Labs/thor-skill --skill thor-plugins-nextron-labs
THOR plugin development enables users to create and package custom plugins to extend THOR's scanning capabilities, load new logic at runtime, and tailor THOR to their environment.
Create a new THOR plugin by implementing Init in plugin.go, adding a metadata.yml, optionally vendoring dependencies, and packaging the files into a ZIP for THOR.
High-intent search queries and answers about installing and using this skill.
To write custom THOR plugins, implement the Init function in a Go file, define a metadata.yml, optionally vendor dependencies, and package the files into a ZIP for deployment. This allows you to load new logic at runtime and tailor THOR to your environment.
Developing custom scanning logic for unsupported file formats in THOR requires a Go development environment and THOR v11 or later. You write the parsing or detection logic in Go, package it as a ZIP, and deploy it to the plugins directory to load automatically at startup.
Yes, you can define YARA rules and rule hooks within your custom plugins to trigger specific actions during THOR scans. This mechanism allows you to flexibly react to detections and implement advanced post-processing of findings.
Package Go plugins for THOR v11+ by creating a ZIP archive containing your plugin.go file and a metadata.yml file. Deploy the ZIP to THOR's plugins directory, where the scanner will automatically load and execute the custom logic at startup.
You should extend THOR with custom plugins when you need to parse unsupported file formats, implement advanced detection logic beyond built-in rules, or post-process findings within THOR v11+. Plugins provide runtime extensibility for tailored environmental scanning.
lpjhelderInstall and configure kronon-forge with Node.js and npm.
NextronSystemsCreate and deploy THOR plugins with Init, metadata.yml, and ZIP packaging.
YukiIto1999Detect malware and indicators of compromise across filesystems and memory dumps with YARA rules.
Nextron-LabsRoute user requests to the appropriate THOR sub-skill for execution.
