Automated FixletBuilder

Hi all,

I've been working on FixletBuilder, a free/open-source (MIT) .NET 8 desktop + CLI tool that generates BES XML content, and thought it might be useful to others here.

What it does:

  • Fixlet generation — GUI (WPF, live XML preview) or CLI; saves valid .bes files
  • 5 detection strategies — MSI product code, EXE file version, registry key + DisplayVersion, DisplayName contains, file/folder exists — pick one and generate the relevance (install/upgrade/uninstall, with mirrored success criteria)
  • Registry-aware relevance — always uses native registry for the correct 32/64-bit view, version comparisons via as string as version
  • Action script builder — searchable reference for 71 ActionScript commands, prefetch downloads with SHA1/SHA256 verification, quick-insert snippets (kill process, stop service, regset, flow control, etc.)
  • Analyses — property grid with templates (app-status, software-inventory, OS overview, disk space...), EvaluationPeriod, KeepStatistics, Validate + Save, and REST publish with --what-if dry-run
  • Batch workflows — CSV/Excel import, installed-app scanner, winget auto-fetch for metadata
  • Patch Tuesday automation — patch discover → validate → generate → publish → groups → staged deploy → compliance, with OS build-range relevance profiles for Win11/Win10/Server
  • BigFix REST client — publish fixlets and analyses, dedupe by KB

Security notes: URL validation blocks private IPs/localhost/metadata endpoints (SSRF), input sanitization for winget args, no telemetry.

Requirements: Windows 10/11 x64, .NET 8 SDK.

It's a work in progress — feedback, feature requests, and bug reports are very welcome. If you'd like to see a specific detection method or command added, let me know.

Thanks!

K K Shal

Repo:

1 Like
  • Patch Tuesday automation — patch discover → validate → generate → publish → groups → staged deploy → compliance, with OS build-range relevance profiles for Win11/Win10/Server

Can you explain how this works?