CISA Releases Open-Source Malware Analysis Platform: Thorium

The Cybersecurity and Infrastructure Security Agency (CISA) has released Thorium, an open-source platform for malware and forensic analysis. Developed in partnership with Sandia National Labs, Thorium automates many tasks in cyberattack investigations, boasting impressive scalability (over 1700 jobs/second, 10 million files/hour per group). It integrates commercial, open-source, and custom tools, supporting software analysis, digital forensics, and incident response. This release follows CISA's previous initiatives, including the Eviction Strategies Tool and Malware Next-Gen analysis system, all aimed at bolstering cybersecurity defenses.