Asgard Server

[Latarsha Lant]

Jumpthrough the Bifrst and enter into Asgard!

Whether you are a Thor fan, a scholar of mythology or just enjoy playing along with other people in Rising World, we welcome all

Our server may still be new but we already have some great builds coming along and have made many friends along the way. Get immersed into an active and fun community and help us tell more people about this awesome game.

We are proud to present a server where all can come and enjoy this wonderful game. Create as you please, become as wealthy as you can possibly imagine and see who gets to be the first to get to endgame Paradises...Upcoming will be Horse races, Hunting trips and much much more...Seeyou on Asgard!!!

Yes thank you for welcoming me. I found this on the list a while back and have been playing on this server and it is fun!

I hope you take my suggestion about adding in the maze with real traps like the dungeons because that would be really cool.

Yes thank you for welcoming me. I found this on the list a while back and have been playing on this server and it is fun!

I hope you take my suggestion about adding in the maze with real traps like the dungeons because that would be really cool.

Herewith some new screenshots from our server.

The welcome area with the round fountain, the colorful bifrost and a new portals building!

A huge thanks to Gillwin for helping us make Asgard even better.

AsgardEmpireCluster 6x

Hello there!

We are looking for players to come and join our cluster, AsgardEmpireCluster!

This server has 6x rates typically, and we do 2x events (so 12x total) quite often. We are a pvp cluster, but we are VERY relaxed as most of us work full time jobs and have kids and life outside of the gaming world. Anything goes besides racism, hate speech, and cheating.

Currently we are running a "Get it started" event and we are running 12x rates for about another week so new players can get the ball rolling. We also ALWAYS keep event colors on!

You can find us by clicking the Unofficial server tab and searching "AsgardEmpireCluster" or "AsgardEmpire". Please stop in and play with us sometime! Thank you for your interest and see you in the game!

ASGARD and other systems which will have to communicate with each other,need the following ports opened within the network. For a detailed and upto date list of our update and licensing servers, please visit -systems.com/hosts/.

All proxy systems should be configured to allow access to these URLswithout TLS/SSL interception. (ASGARD uses client-side SSL certificatesfor authentication). It is possible to configure a proxy server, usernameand password during the setup process of the ASGARD platform. OnlyBASIC authentication is supported (no NTLM authentication support).

Please make sure that you install your ASGARD with a domain name(see Network Configuration). If you do not set theDomain Name and install the ASGARD package, your clients won't be ableto connect to your ASGARD.

Diablo 2 Asgard PvP Realm is an unofficial server of Diablo 2: Lord of Destruction with absolutely no commercial elements. All trademarks referenced herein are the properties of their respective owners. Asgard PvP Realm requires a legitimate copy of Diablo II: Lord of Destruction.

In almost any method of deployment, the provision of valid licenses for the scanners on the endpoints is a core issue.Every license is limited to a certain host name. The only exception are the rare and relatively expensive "Incident Response" licenses.

In ASGARD 2.5+ you're able to configure a download token to limit the download ofTHOR packages and licenses to clients with knowledge of this token. The token isa protection that no one without knowledge of that token can intentionally exceedyour license quota limit or retrieve a THOR package without authorization.

You can also script the license retrieval from a local ASGARD server by using the API. The helpbox in ASGARD's Licensing > Generate License section shows curl requests that can be usedto retrieve licenses from your ASGARD server.

You can retrieve an appropriate THOR license at the scan start using the built-in--portal-key and --portal-contracts parameters. The --portal-contractsparameter is optional. It can be used to take licenses from a specific contract incase you have more than one and want to use a specific one. If none is set, THORwill automatically retrieve licenses from a contract of the right type. (e.g.retrieve workstation license from the first still valid contract that hasworkstation licenses available)

This is a bit more complicated as we've decided long ago that our customer portal willnever contain personal or otherwise relatable information and this includes any kindof hostnames - not even in memory. Therefore it's necessary to generate a HMAC SHA1hash of the lowercased hostname on the client side and include only the hash in therequest to our customer portal.

This command generates a HMAC SHA1 of the current host you're working on. If you'dlike to generate a license for a different host, simply replace the first partof the command with echo -n "mycustomname".

A lightweight deployment option provides the THOR program folder on aread-only network share and makes it accessible from all systems withinthe network. Systems in DMZ networks can be scanned manually bytransferring a THOR program package to the system and run it from thecommand line. The locally written log files have the same format as theSyslog messages sent to remote SIEM systems and can be mixed without anyproblem.

We often recommend triggering the scan via "Scheduled Task" distributedto the systems via GPO or PsExec. The servers access the file share at agiven time, pull THOR into memory and start the scan process. You caneither mount the network share and run THOR from there or access itdirectly via its UNC path (e.g. \\server\share\thor.exe or \\server\share\thor64.exe).

The preferred way to run THOR on a remote system is by providing anetwork share on which the extracted THOR package resides. You can usethis directory as the output directory but it is recommended to createanother share with write permissions especially for the HTML and TXTresult files. The share that holds the THOR program folder should beread-only. The various output files must be disabled or defined indifferent locations in order to avoid write-access errors.

In a Windows Domain environment, you can create a Scheduled Task anddistribute this Scheduled Task via GPO. This Scheduled Task would invokethe batch file on the network share and runs THOR. Make sure that therespective user account has the rights to mount the configured networkshare.

ASGARD is the central management platform for THOR scans. It managesdistributed THOR scans on thousands of systems, collects, forwards andanalyses logs. Furthermore, ASGARD can control and execute complexresponse tasks if needed.

ASGARD comes in two variations: While ASGARD Management Center featuresscan control and response functions, ASGARD Analysis Cockpit can be usedto analyze large amounts of scan logs through an integrated base-liningand case management.

The hardened, Linux-based ASGARD appliance is a powerful, solid andscalable response platform with agents for Windows, Linux and macOS. Itprovides essential response features like the collection of files,directories and main memory, remote file system browsing and othercounteractive measures.

In practice it is crucial to execute THOR on many servers in a network.A possible way to achieve this is described within this paper, takinginto account that the footprint on the target should be minimal and thatthe procedure should not depend on the used Linux Distribution.

The software Ansible ( ) is a solution to performtasks distributed over a network on different targets. An Open SourceVersion is available as well as a version with commercial support forenterprises. Ansible uses SSH to connect to the target hosts andperforms a defined set of tasks on them called playbooks. Per default ituses keys for authentication, but this can be setup differently. Pleaserefer to the official documentation for other methods ofauthentication. The tasks and the targets can be customized usinghost groups. The host groups may be used to separate different Linuxdistributions. The other steps may remain the same. Within the playbookany command line option may be customized for the given scenario.

First it is needed to define a list of hosts to execute THOR on. This isdone by setting up a YAML file with the hostnames or IP addresses of thehosts. This file is later used with the -i parameter in theansible-playbook command. A simple version of this could look likefollowing:

After the playbook finished running the scans, the output of each systemcan be found in the thoransible-output directory located at theparent directory of THOR. Therefor it is important that the userstarting ansible-playbook has the required rights to write in thisdirectory.

Per default this playbook will only start THOR with the parameter thatdefines the output log file. This can be changed in the playbook in the"Execute THOR"-Task. However, it should be kept in mind, that changingthe output log file is not recommended, since the later tasks of theplaybook depend on this.

The full-featured mode is the default. In this mode Thunderstorm alsoparses and analyses Windows Eventlogs (EVTX), registry hives, memorydumps, Windows error reports (WER) and more. It's not just a YARA scan,but a full forensic processing.

Sets whether samples should be stored permanently in the folder specified with --server-upload-dir. Specify all to store all samples, or malicious to store only samples that generated a warning or an alert. (default none)

After the launch of THOR Thunderstorm, we may allow other license typesto run THOR in service mode for a limited period of time, so thatcustomers can test the service and its integration into other solutions.

3a8082e126