Data and Database Forensics Expert

Question

Data and Database Forensics Expert

Anam Verma

SSCertifiable

Points: 5365
More actions
November 6, 2008 at 5:46 pm

#99334

I was going through a job portal to have a look what market demands in this financial crisis market. There i found a job requiring SQL 2K5 skills for data and database forensics. Not much information was given in the advertisement. But eligibility criteria seems to be somewhat database analyst and administrator. i am wondering
1. what comes under data and database forensics. Haven't heard about it before.
2. What would be job profile of the candidate and i can't figure out roles and responsibilities of the candidate.
3. I can understand that one can analyse data and forensics can be involved in it, but how is forensics involved in databases?
Has anybody did similar kind of role or is someone aware of these roles.
Forensics itself is very interesting and if it is in now databases, i'll love to go into it.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

Adrian Nichols-360275 SSCertifiable Points: 7694 More actions · Answer 1

Hi,

I would have thought that forensics in a database sense would be investigating data breaches and the like. Having a quick scout about, WikiPedia provided this:

http://en.wikipedia.org/wiki/Database_Forensics

HTH

Ade

A Freudian Slip is when you say one thing and mean your mother.
For detail-enriched answers, ask detail-enriched questions...[/url]

Anam Verma SSCertifiable Points: 5365 More actions · Answer 2

Thanks Adrian. That link gave me a little insight of what is database forensics.

Even i was of the same opinion as you said, something related to breaches. But was keen to know what kind of breaches and how experts hunt for it, handle it and the outcomes when a breach is found.

Have you noticed one thing on that link that all the forensic database references were from Oracle. Non of them were pointing to SQL Server. It would be interesting to know if SQL Server is also involved in these kind of forensic activities.

Steve Jones - SSC Editor SSC Guru Points: 734449 More actions · Answer 3

I think all of us have done some of this with root cause analysis or backtracking through logs to find out what happened. Data has an interesting aspect in that people are changing it all the time and you might need to try and dig through transaction logs as well.

Sounds like a neat job.