thor-scan

Propose safe THOR scan commands for hosts, directories, images, or memory dumps.

12|2|Updated Jan 17, 2026

Search Tags:#cross-platform #preflight #forensics #thor #command-generation #lab-mode #endpoint-scan

Ready to run

npx skills add https://github.com/Nextron-Labs/thor-skill --skill thor-scan-nextron-labs

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: thor-scan
Source: https://github.com/Nextron-Labs/thor-skill/tree/main/thor-scan
Command: npx skills add https://github.com/Nextron-Labs/thor-skill --skill thor-scan-nextron-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Proposes safe, reproducible THOR command lines tailored to endpoint investigations across Windows, Linux, and macOS for hosts, directories, mounted images, or memory dumps.

Core Features & Use Cases

Generates exact THOR command lines with minimal preflight checks.
Provides environment-aware guidance on OS, THOR binaries, and license requirements.
Supports conservative live endpoint scans or lab-like forensic workflows while prioritizing safety.

Quick Start

Describe your target and OS preference, and the skill will output a precise THOR command.

Frequently Asked Questions about thor-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate safe THOR commands for a macOS endpoint scan?▼

Generating safe THOR commands for macOS involves assessing OS details, THOR binaries, and license availability to output a precise, reproducible scan command line tailored to your specific endpoint target.

Can I run a forensic THOR scan on a mounted image or memory dump?▼

You can scan mounted images or memory dumps by generating lab-like THOR configurations that assess environment details and target types to produce safe, reproducible forensic command lines.

What is the best way to configure THOR for cross-platform forensics?▼

Configuring THOR for cross-platform forensics requires assessing OS, THOR binary, and license availability to determine appropriate conservative live endpoint or lab-like forensic scan configurations.

Do I need a license to perform a THOR directory scan on Linux?▼

Performing a THOR directory scan on Linux requires assessing license availability, OS, and THOR binary presence to generate a safe, reproducible command line tailored to your environment.

When should I use conservative versus lab-like THOR scan configurations?▼

Conservative THOR configurations suit live endpoint scans prioritizing safety, whereas lab-like configurations support forensic workflows on directories, mounted images, or memory dumps across Windows, Linux, or macOS.