DNS poisoning detection for Windows`
Source Reddit Cybersecurity
Discussion
DNS Watchdog is a PowerShell script for Windows that monitors local DNS traffic to detect signs of DNS poisoning or spoofing. It uses the built-in Windows packet capture tool pktmon to capture DNS packets and analyzes them for conflicting DNS responses, unexpected DNS server replies, unmatched DNS answers, and ARP spoofing indicators. The tool is heuristic and may produce false positives, but repeated alerts can indicate real attacks. It requires Windows 10 (1809+) or later and runs without third-party dependencies.
r/cybersecurity (opens in a new tab)u/micro1aser0 points0 comments
https://github.com/microlaser/dns_watchdog_windows2
Sure it is vibe coded, but it is free and open source and has no dependencies. I have a version that runs on MacOS and Linux too. Uses pcaps to detect DNS poisoning. Everything is native, no Wireshark/tcpdump needed.