December 7, 2016

DecaffeinatID: A Very Simple IDS / Log Watching Application / ARPWatch For Windows

Adrian Crenshaw from Irongeek.com developed a utility to monitor Address Resolution Protocol (ARP) in Windows OS to detect ARP related attacks.

According to the project website, DecaffeinatID is a simple application that acts as an Intrusion Detection System to notify the user whenever other users at their local Wi-Fi hotspot/ LAN are up to the kind of “reindeer games” that often happen at coffee shops and public places.

DecaffeinatID watches the Windows logs for three types of activities such as:

  • New or changed ARP table entries
  • New events in security log
  • New events in the firewall log

DecaffeinatID is Microsoft Windows XP SP2 and Vista compatible.

Visit the project page here.

Download DecaffeinatID from: http://irongeek.com/downloads/decaffeinatid0.09.zip