Welcome to THOR Log Analysis documentation! .. toctree:: :maxdepth: 2 :numbered: :caption: Contents: usage/introduction usage/analyst usage/recommendations usage/filescan usage/shimcache usage/autoruns usage/logscan usage/groupsxml usage/registry usage/wmipersistence usage/vulnerability usage/loggedin usage/processcheck usage/hotfix usage/runkey usage/amcache usage/firewall usage/servicecheck usage/dns usage/hosts usage/wmistartup usage/command usage/processhandles usage/processcon usage/wer usage/useraccounts usage/atjobs usage/scheduled usage/rescontrol usage/deepdive usage/other usage/generic usage/tools Indices and tables :ref:`search`