Versions

4.5.0218.0	7.33%
4.5.0216.0	7.05%
4.4.0304.0	4.23%
4.4.0304.0	0.28%
4.4.0304.0	0.42%
4.3.0219.0	6.21%
4.3.0219.0	2.82%
4.3.0216.0	0.85%
4.3.0216.0	1.55%
4.3.0215.0	3.24%
4.3.0215.0	0.99%
4.2.0223.0	11.00%
4.2.0223.0	20.87%
4.2.0216.0	0.42%
4.1.0522.0	19.89%
4.1.0522.0	12.83%

nissrv.exe has 16 known versions, the most recent one is 4.5.0218.0. It is started as a Windows Service called 'Windows Defender-Netzwerkinspektionsdienst' with the name 'WdNisSvc' and described as “Schützt gegen Eindringversuche bei bekannten und neu erkannten Sicherheitsrisiken von Netzwerkprotokollen.”. . It is run under the context of the LOCAL SERVICE account. The average file size is about 327.72 KB. It is an authenticode code-signed executable issued to Microsoft Corporation by the certification authority Microsoft Corporation. The programs Microsoft Security Essentials, Microsoft Security Client and MS Security Essentials have been observed as installing specific variations of nissrv.exe. This is a .NET Common Language Runtime (CLR) assembly. During the process's lifecycle, the typical CPU resource utilization is about 0.0023% including both foreground and background operations, the average private memory consumption is about 10.25 MB. Addionally, typically read and write I/O disk operations is about 39.55 KB per minute for reads and 97 Bytes per minute for writes.

Network Inspection System (NIS), which is the signature-based part of the Forefront TMG Intrusion Prevention System and Microsoft Security Essentials. NIS uses signatures of known vulnerabilities from the Microsoft Malware Protection Center to help detect and block malicious traffic. NIS, which is enabled by default, can be configured from the Getting Started Wizard.