Data Breach Preparation and Response

Chapter 6

Precisely Determining the Scope of a Breach

Kevvie Fowler

Abstract

This chapter will provide guidance to the reader on how to use database forensics to precisely scope better than ever before. Guidance will include access to a new, never before released tool to simplify and investigation.

Keywords

Database forensics; dbInvestigator; Ringzero; Database artifacts; Negative assurance; Positive assurance; Data access impact scale; Database activity timeline; Indicators of database compromise

Contents

Introduction

Database Forensics Overview

Using Database Forensics in an Investigation

Defining the Objective of Your Investigation

Database Forensic Tools

Connecting to the Database

Logging Your Actions

Connecting Using a Tool

Connecting ...