The VectorN Detection engine is a new feature and its purpose is to search for patterns within the blocks that Thor's Traffic Scanning records. 

• It works across-the-board on any Windows™ device;
• It does not rely on scanning the code or auditing any system processes. Instead, the new technology uses Machine Learning Detection (MLD) to perform an in-depth analysis of all incoming and outgoing HTTP, HTTPS and DNS traffic.
• It matches Machine Learning (MLD) insights with Indicators of compromise/attack (IOC/IOA) and network forensics, turning Thor Foresight into a unique, proactive cybersecurity suite.
• It helps users discover even hidden, second-generation malware that tries to infect the endpoint or attempts to harvest data from the compromised system.
• By tracking device-to-infrastructure communication, this technology enables users to detect and block advanced malware, regardless of the attack vector.

Example: 

If Thor Foresight's Traffic Scanning is blocking a specific domain or multiple domains at a specific time of the day, VectorN Detection will consider this a pattern and will inform the user that there might be a possible threat. 

Patterns:

- A domain is blocked multiple times a day in a very short time period.

- A domain is blocked every day at a specific time 

- Multiple domains are blocked in a very short time period. 

Thor Premium product line-up includes 2 main product branches: Thor Foresight and Thor Vigilance. The products complement each other, and they should be combined in order to offer maximum system and network protection. 

Thor Foresight has been specifically designed to protect you from financial and data-stealing malware while doing banking operations and keep you safe from Zero Hour malware and security exploits frequently employed by IT, criminals.

1. When Thor is installed your local DNS is changed to 127.7.7.x and your DNS server is saved by Thor in the registries.
2. Four new services will be activated: Heimdal Antivirus, Heimdal Client Host, Heimdal DarkLayer Guard and Heimdal Uptime Checker, all of them set to Automatic
3. Two new folders will be created, one in Program Files or Program File (x86), depending on the OS architecture and one in ProgramData.
4. One icon in the Taskbar
5. One certificate in the Trusted People folder.

In case you suspect that your antivirus is interfering with Heimdal Security’s functionality, you’ll need to add some exceptions to allow Thor to work properly.

Here are some examples of potential interferences:

The Heimdal services do not start at Windows’s start-up or the network adapter’s DNS 127.0.0.1 is not set for some reason even if the Traffic Scanning is ON.

The files you need to add are located in this path: C:\Program Files (x86)\Heimdal (you need to add them one by one) 

- Heimdal.Agent​​
- Heimdal.AgentLoader​​
- Heimdal.ClientHost​​
- Heimdal.SecureDNS​
- Heimdal.UptimeChecker.exe
- Heimdal.AgentError.exe

Restart the computer and check if everything is working as it should!

1. When Thor is installed your local DNS is changed to 127.7.7.x and your DNS server is saved by Thor in the registries.
2. Four new services will be activated: Heimdal Antivirus, Heimdal Client Host, Heimdal DarkLayer Guard and Heimdal Uptime Checker, all of them set to Automatic
3. Two new folders will be created, one in Program Files or Program File (x86), depending on the OS architecture and one in ProgramData.
4. One icon in the Taskbar
5. One certificate in the Trusted People folder.