The newest version 10.6.11 of THOR for macOS now has support for Apple’s M1 platform.
The THOR scanner binary is now a “universal” binary that runs on both supported platforms.
You can find a list of supported architectures and operating systems in the respective chapter of the online documentation.
Florian Roth serves as the Head of Research and Development at Nextron Systems. With a background in IT security since 2000, he has delved deep into nation-state cyber attacks since 2012. Florian has developed the THOR Scanner and actively engages with the community via his Twitter handle @cyb3rops. He has contributed to open-source projects, including 'Sigma', a generic SIEM rule format, and 'LOKI', an open-source scanner. Additionally, he has shared valuable resources like a mapping of APT groups and operations and an Antivirus Event Analysis Cheat Sheet.