DecaffeinatID: simple security log monitor
posted Jun 18th 2008 11:15pm by Eliot Phillipsfiled under: security hacks

Irongeek put together a simple program for monitoring network shenanigans when you’re on an untrusted network like the coffee shop. It sits in the Windows Systray and notifies you about a variety of events. It alerts you when it sees the MAC address of the IP gateway change. It watches the security log and warns you of any attempted or successful logins. The firewall log is also monitered. Try it out and send him any bug reports/feature requests you might have.

For the Firewalllog setting in Vista, open the start menu and type Windows Firewall. Click to open “Windows Firewall with Advanced Security” (not “Windows Firewall”). In the right pane, click Properties. Then in the Logging section, click the Customize button. The Name field contains the location of the log file; copy that field and paste it into the decaffeinatid.ini setting.
Also I’m testing it now, but it looks to me like Sleep should be something considerably larger than 0. Remember it’s in milliseconds; for the not-so-tech-savvy reader, that means 1000 = 1 second.
I’m always a little wary of polling programs; they cause minute up-and-down spikes in CPU usage…
Posted at 11:38 pm on Jun 18th, 2008 by Ricky