Nextron Systems - Management Center v3

Welcome to the manual for the Management Center v3.

Note

If you are still using an older version of the Management Center, please click here to see the older version of the documentation.

Management Center is the central management platform for THOR scans. It manages distributed THOR scans on thousands of systems, collects and forwards scan results.

Furthermore, the Management Center can control and execute complex response tasks, if needed. It features built-in response playbooks for quarantining endpoints, creating and collecting triage packs, opening a remote command line and other actions incident response specialists will find useful.

Contents

• 1. Requirements
  • 1.1. Introduction
  • 1.2. Hardware Requirements
  • 1.3. Agent Requirements
  • 1.4. Network Requirements
  • 1.5. Antivirus and EDR Exclusions
  • 1.6. Verify the Downloaded ISO (Optional)
• 2. Setup Guide
  • 2.1. Create a new ESX VM and Mount the ISO
  • 2.2. Navigate through the installer
  • 2.3. Network Configuration
  • 2.4. Choosing a password
  • 2.5. Partitioning the Hard Disk
  • 2.6. Proxy Configuration
  • 2.7. Changing the IP-Address
  • 2.8. Install the Management Center Service
• 3. Administration
  • 3.1. System Status
  • 3.2. Endpoint Agent Deployment
  • 3.3. Uninstall Endpoint Agents
  • 3.4. Asset Management
  • 3.5. Scan Control
  • 3.6. Scan a Single System
  • 3.7. Scan a Group of Systems
  • 3.8. Scheduled Group Scan
  • 3.9. Syslog Forwarding
  • 3.10. Response Control
  • 3.11. Aurora
  • 3.12. Sigma
  • 3.13. IOC Management
  • 3.14. Evidence Collection
  • 3.15. Thunderstorm
  • 3.16. Download Links
  • 3.17. Licensing
  • 3.18. Updates
  • 3.19. User Management
  • 3.20. Additional Settings
  • 3.21. Advanced Settings
  • 3.22. User Settings
• 4. Master Management Center
  • 4.1. Installation
  • 4.2. Hardware Requirements for Master Management Center
  • 4.3. License Management
  • 4.4. Setting up Master Management Center
  • 4.5. Link Management Centers with Master Management Center
  • 4.6. Scan Control
  • 4.7. Asset Management
  • 4.8. IOC Management
  • 4.9. Service Control
  • 4.10. Evidence Collection
  • 4.11. Download Section
  • 4.12. Updates
  • 4.13. User Management
  • 4.14. Master Management Center and Analysis Cockpit
  • 4.15. Master Management Center API
• 5. Maintenance
  • 5.1. Backup & Restore
  • 5.2. Managing Logs
  • 5.3. Regain Disk Space
• 6. Advanced Configuration
  • 6.1. Agent and Agent Installer Update
  • 6.2. Creating Custom Agent Installers
  • 6.3. Disable Remote Console Globally
• 7. Troubleshooting
  • 7.1. Diagnostic Pack
  • 7.2. Agent Debugging
  • 7.3. SSL Interception
  • 7.4. Using Hostname instead of FQDN
  • 7.5. Resetting TLS/SSL Certificates
  • 7.6. Admin User Password Reset
  • 7.7. Resetting Two Factor Authentication
  • 7.8. Scheduled Scans have incorrect time
  • 7.9. Aurora has too many False Positives
• 8. Known Issues
  • 8.1. Known Issues
• 9. Appendix
  • 9.1. Installing Endpoint Agent via Powershell Script
  • 9.2. Deploy Endpoint Agents via SCCM
  • 9.3. Broken file and folder permissions
  • 9.4. Installing Endpoint Agent on a Golden Image
  • 9.5. Install TLS certificates on Management Center and Master Management Center
  • 9.6. Bypass Apple verification during installation of asgard2-agent
  • 9.7. Full Disk Access for macOS asgard2-agent-service via MDM
• 10. Changelog
  • 10.1. Management Center v3.3
  • 10.2. Management Center v3.2
  • 10.3. Management Center v3.1
  • 10.4. Management Center v3.0

Indices and tables

• Search Page