1.1. Introduction

Management Center is the central management platform for THOR scans, Aurora real-time endpoint protection, custom playbooks, and Thunderstorm. It can manage distributed THOR scans on thousands of systems and collect and forward scan results to Analysis Cockpit or your own SIEM.

Management Center can control and execute complex response tasks when needed, including opening live remote command prompts on endpoints and running other incident response actions. It also provides an easy-to-use interface for creating custom multi-step response playbooks, which can execute commands on endpoints and collect the corresponding output.

The Management Center comes bundled with Debian on a custom ISO file and can be deployed in many different ways.

This document describes the functions and steps for setting up and operating Management Center. It also explains how to add systems for scanning and run individual or group scans with separate parameters.