SQL Server Security Audit (Part 2) - Database Level Audit

The second in the Security Audit series looks at securing an individual database.

Auditing with SQL Profiler

Complete package to allow tracking of any data that Profiler can capture and storage for auditing purposes, use to satisfy SOX compliance.

The New Reality of an Audit Trail

With a continuation of his last article on auditing, Leo Peysakhovich enhances his solution to capture more details using XML.

Who's been logging into my SQL Server?

In a recent blog post, see the steps Denny Cherry thinks are vital to monitoring both successful and unsuccessful outside user logins to your SQL Server.

Rant: Is It an Effective Control or Not?

This is spurred on by a comment a pen tester made. He was referring to a particular technology and said something to the effect of, "What do you expect? It's 30 year-old technology." I was stunned when the comment was relayed to me. My response...

SQL Server Audit: Magic without a Wizard

In SQL Server 2008, Microsoft introduced SQL Server Audit. This is much better than anything we had before, and is likely to meet the needs of all but the largest, or most highly-regulated industries. SQL Server 2008 Enterprise Edition includes all of the features, whereas SQL Server 2008 Standard Edition only provides a subset. What is most attractive about it, is that it is easy to administer, as Thomas LaRock explains.

Imaginative Auditing with Rollback (Undo) and RollForward (Redo) Part I

Using an audit table to rollback changes to data might be a nice addition to many applications. David McKinney's new series looks at how you can use this data for RollBack or RollForward.

Auditing Failed Logins in SQL Server

An auditor has taken a look at our SQL Servers and has told us that we need to audit login failures to the SQL Servers themselves. How do we do this?

Auditing

Analyzing SQL Server Permissions

This article shows the steps to analyze SQL Server logins and permissions to ensure that there are no logins and users that exist who are have unnecessary access