The US Cyber Security and Infrastructure Security Agency (CISA) today announced the public availability of Thorium, which is an open-source platform for malware and forensic analysts in the government, public and private sectors.
Thorium was developed Sandia in partnership with national laboratories As a scalable cyber security suit that automates several tasks involved in the cyber attack test, and can schedule more than 1,700 jobs per second and inges up more than 10 million files per hour per hour.
“Thorium enhances the capabilities of cyber security teams by automatic analysis workflows through commercial, open-sources and custom tools,” Sisa said On Thursday.
“It supports various mission functions, including software analysis, digital forensic, and the response to the event, allowing analysts to efficiently assess complex malware hazards.”
Security teams can use thorium to automate and accelerate various file analysis workflows, including: but it is not limited:
- Easily import and export equipment to facilitate sharing in cyber defense teams,
- Integrate command-line tools in the form of doors images including open-sources, commercial and custom software,
- Filter results using tag and full-text search,
- Submission with strict group-based permissions, access to tools and results,
- Scale with Kuberanets and Skyladb to meet the workload demands.
Defenders can find installation instructions and get your copy of thorium CISA official github repository,
“By sharing this platform publicly, we empower the wider cyber security community to orkstrate the use of advanced equipment for malware and forensic analysis,” said CISA Associate Director for Threat Hunting Zemine Roybuck.
“Scalable analysis of other digital artifacts along with binergies further enables cyber safety analysts to understand and address weaknesses in benign software.”
On Wednesday, CISA released Bicker strategies toolsWhich helps the security teams during the reaction of the incident by providing necessary action to include and evicted opponents from compromised networks and equipment.
Last year, the Cyber Defense Agency also publicly provided its “Malware Next-Jen” analysis system, allowing the public to present samples of malware for analysis by CISA.
A year ago, CISA began offering free security scans for important infrastructure facilities to help protect from hacker attacks.