Skip to content

Updating Set of Nirsoft Detections - #4303

Merged
nasbench merged 16 commits into
developfrom
detect_nirsoft_utilities
Oct 14, 2026
Merged

Updating Set of Nirsoft Detections#4303
nasbench merged 16 commits into
developfrom
detect_nirsoft_utilities

Conversation

@onurmerdogan

@onurmerdogan onurmerdogan commented Oct 1, 2026

Copy link
Copy Markdown
Contributor

Details

Current detection base has multiple analytics targeting Nirsoft utilities. This PR deprecates duplicate ones and updates the lookup that is used for identifying such software.

  • Detection of tools built by NirSoft: Using command line arguments are not as reliable compared to internal/original name of the file, therefore deprecated. Its content is covered by Windows NirSoft Utilities.
  • Possible Browser Pass View Parameter: Using command line arguments are not as reliable compared to internal/original name of the file, therefore deprecated. Its content is covered by Windows NirSoft Utilities.
  • Windows NirSoft AdvancedRun: Using command line arguments are not as reliable compared to internal/original name of the file, therefore deprecated. Its content is covered by Windows NirSoft Utilities.
  • Windows NirSoft Tool Bundle File Created: Changed its SPL to use an extended list of bundle ZIPs. Adapted the use of lookups.
  • Windows NirSoft Utilities: Updated its lookup to use an up-to-date list using tool descriptions.

@onurmerdogan onurmerdogan added this to the v6.8.0 milestone Oct 1, 2026
@nasbench nasbench modified the milestones: v6.8.0, v6.9.0 Oct 1, 2026
@nasbench

nasbench commented Oct 5, 2026

Copy link
Copy Markdown
Contributor

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-13T19:21:15.573878Z fe0c0e7 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Oct 5, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 776ced143b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread detections/deprecated/detection_of_tools_built_by_nirsoft.yml
Comment thread lookups/csv/nirsoft_utilities_lookup.csv Outdated
Comment thread detections/endpoint/windows_nirsoft_tool_bundle_file_created.yml Outdated
Comment thread detections/endpoint/windows_nirsoft_utilities.yml
nasbench
nasbench reviewed Oct 5, 2026
View reviewed changes
Comment thread detections/endpoint/windows_nirsoft_utilities.yml Outdated
nasbench
nasbench reviewed Oct 5, 2026
View reviewed changes

@nasbench nasbench left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a small comment

nasbench
nasbench reviewed Oct 5, 2026
View reviewed changes
Comment thread detections/endpoint/windows_nirsoft_tool_bundle_file_created.yml Outdated
@nasbench

nasbench commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

@codex review

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Oct 9, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: de94c553fb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread detections/endpoint/windows_nirsoft_tool_bundle_file_created.yml Outdated
Comment thread lookups/csv/nirsoft_utilities_lookup.csv
@nasbench
nasbench force-pushed the detect_nirsoft_utilities branch from de94c55 to ab6db46 Compare October 13, 2026 17:22
@nasbench

nasbench commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

@codex review

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Oct 13, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c0a8671216

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread lookups/csv/nirsoft_utilities_lookup.csv
@nasbench

nasbench commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

@codex review

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Oct 13, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e23dc4baa0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread lookups/csv/nirsoft_utilities_lookup.csv
@nasbench

nasbench commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

@codex review

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Oct 13, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fe0c0e789f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread detections/endpoint/windows_nirsoft_utilities.yml
@nasbench
nasbench merged commit 13bf175 into develop Oct 14, 2026
6 checks passed
@nasbench
nasbench deleted the detect_nirsoft_utilities branch October 14, 2026 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments
@nasbench nasbench nasbench approved these changes
@patel-bhavin patel-bhavin Awaiting requested review from patel-bhavin patel-bhavin is a code owner
@ljstella ljstella Awaiting requested review from ljstella ljstella is a code owner
@pyth0n1c pyth0n1c Awaiting requested review from pyth0n1c pyth0n1c is a code owner
@RavenTait RavenTait Awaiting requested review from RavenTait RavenTait is a code owner
@tccontre tccontre Awaiting requested review from tccontre tccontre is a code owner
@rosplk rosplk Awaiting requested review from rosplk rosplk is a code owner
@P4T12ICK P4T12ICK Awaiting requested review from P4T12ICK P4T12ICK is a code owner

Assignees

No one assigned

Labels

Detections

Projects

None yet

Milestone

v6.9.0

Development

Successfully merging this pull request may close these issues.

2 participants

@onurmerdogan @nasbench