Trace Script for XP_CMDSHELL

• dwilliscp

  SSCrazy Eights

  Points: 9270

  More actions

  September 17, 2013 at 11:44 am

  #395502

  Is there a way to use a trace and capture only when XP_CMDSHELL is used, and what used it?

• datwungai

  SSChasing Mays

  Points: 648

  More actions

  January 13, 2014 at 12:29 pm

  #1679678

  Bump

• Keith Tate

  SSCrazy Eights

  Points: 9938

  More actions

  January 13, 2014 at 12:33 pm

  #1679682

  You could run a profiler trace (server side trace) to capture Text Data that contains %xp_cmdshell% and then add the columns you want to see i.e. Host Name, Login, etc.

  ---

  
  Microsoft Certified Master - SQL Server 2008
  Follow me on twitter: @keith_tate

  Forum Etiquette: How to post data/code on a forum to get the best help[/url]

• dwilliscp

  SSCrazy Eights

  Points: 9270

  More actions

  January 14, 2014 at 9:13 am

  #1679960

  Ok, thanks for the help.

• datwungai

  SSChasing Mays

  Points: 648

  More actions

  February 5, 2014 at 5:41 pm

  #1686407

  Thanks for your help!