Microsoft Network Real-Time Inspection

[hjlbx]

Did you know that Microsoft Windows includes Network Real-Time Inspection ?

NirSrv.exe is an integral part of Windows Defender. It is a service process.

Network real-time inspection is latest tool to fight malware, detect suspicious activity - The Fire Hose

In fact, it is little known that NirSrv.exe has been around since the Microsoft Security Essentials days.

MSE 2.0 released with heuristics, network inspection

 

[Solarlynx]

NRI gives much needed network behavior coverage, as it is another BM sensor that works with many events (such as file, process and registry) to detect suspicious activity.

What does it mean "network behavior coverage"? It's AV, not FW.

 

[Solarlynx]

What does it mean "network behavior coverage"? It's AV, not FW.

Oops just found myself in the second OP link:

MSE 2.0's network inspection feature is as straightforward as it sounds: it watches for suspicious traffic and protects your system from network-based attacks.

 

[hjlbx]

What does it mean "network behavior coverage"? It's AV, not FW.

It monitors network "behavior" - I would think like file source, zone.identifier (ADS) ,etc.

 

[Solarlynx]

So this humble MSE is not a simplton!

 

[Solarlynx]

It monitors network "behavior" - I would think like file source, zone.identifier (ADS) ,etc.

Thanks. Actually I thought something the same.

 

[Ink]

Not sure, but I don't think Windows Defender (in Windows 8.0) has this network protection. Only the following do

• Microsoft Security Essentials
• Windows Defender (Windows 8.1) version
• Windows Defender (Windows 10) version

 

[Deleted member 178]

Anyway who use Win8.0 when Win10 is its improved version?

 

[hjlbx]

Anyway who use Win8.0 when Win10 is its improved version?

W8 = unwanted red-headed step-child of the Microsoft universe...

It's a saying here - hillbillies, rednecks and miscreants use it.

I was a redneck, now I'm a hillbilly.