Seven national blue teams ran THOR scanner at Locked Shields 2026, want LLM-assisted analysis

cyb3rops · x · 2026-10-10

At Locked Shields 2026, the world's largest live-fire cyber defence exercise run by NATO CCDCOE, seven national blue teams used Nextron's THOR APT Scanner. Teams baseline-scanned disk images to spot pre-compromised changes, automated fleet scans via Ansible, and their top request was easier integration with LLM-assisted analysis — a focus for THOR v11.

Original post →

More from Safety

Safety channel →