SQL Server Forensic Analysis

The tools and techniques investigators need to conduct crucial forensic investigations in SQL Server.

* The database is the part of a forensic investigation that companies are the most concerned about. This book provides data and tools needed to avoid under or over reporting.
* Teaches many about aspects about SQL server that are not widely known.
* A complete tutorial to conducting SQL Server investigations and using that knowledge to confirm, assess, and investigate a digital intrusion.

Companies today are in a terrible bind: They must report all possible data security breaches, but they don't always know if, in a given breech, data has been compromised. As a result, most companies are releasing information to the public about every system breech or attempted system breech they know about. This reporting, in turn, whips up public hysteria and makes many companies look bad. Kevvie Fowler's 'SQL Server Forensic Analysis' is an attempt to calm everyone down and focuses on a key, under-documented component of today's forensics investigations. The book will help investigators determine if a breech was attempted, if information on the database server was compromised in any way, and if any rootkits have been installed that can compromise sensitive data in the future. Readers will learn how to prioritize, acquire, and analyze database evidence using forensically sound practices and free industry tools. The final chapter will include a case study that demonstrates all the techniques from the book applied in a walk-through of a real-world investigation.