RIVET logoRIVET

Home / Process library / nissrv.exe

What is nissrv.exe?

nissrv.exe is Defender Network Inspection. Defender's network protection, which inspects traffic for known exploits.

Namenissrv.exe
Full nameDefender Network Inspection
PublisherMicrosoft Windows Publisher
Normal location%ProgramData%\Microsoft\Windows Defender\Platform or %ProgramFiles%\Windows Defender
Safe to end?Keep No. nissrv.exe is part of Windows and should keep running.
If you end itNetwork-level malware protection stops.

How to check it's the real nissrv.exe

  1. Open Task Manager (Ctrl+Shift+Esc) and go to Details.
  2. Right-click nissrv.exe and choose Open file location. It should open %ProgramData%\Microsoft\Windows Defender\Platform or %ProgramFiles%\Windows Defender.
  3. Right-click the file, choose Properties, then Digital Signatures. The signer should be Microsoft Windows Publisher.

A file called nissrv.exe somewhere else, or without that signature, is worth scanning with Microsoft Defender.

What RIVET shows

RIVET's process list shows nissrv.exe with this explanation, the verdict above, and a signature check, so you can see at a glance whether it is the genuine Windows file. Ending a process can't be undone, and RIVET warns you before it ends anything Windows needs.

Get RIVET freeAll processes and services

Questions

Is nissrv.exe a virus?

The genuine nissrv.exe is part of Windows, signed by Microsoft Windows Publisher, and runs from %ProgramData%\Microsoft\Windows Defender\Platform, %ProgramFiles%\Windows Defender. Malware sometimes copies the name, so check the location and signature as shown above.

Can I end nissrv.exe?

No. nissrv.exe is part of Windows and should keep running. Network-level malware protection stops.

Source: https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-windows

Last updated 29 October 2026