SQL Server Forensic Analysis

3. SQL Server Forensics

As the nature of cybercrime changes from loud attacks, such as distributed denial-of-service (DDoS) attacks and Web site defacements, to stealthy and financially motivated attacks, digital investigations now more than ever are leading to databases that typically store the sensitive information targeted by these covert attacks.

In this chapter, we take a focused look at SQL Server forensics, including how this specialized area of forensics came to be, what it is, and how it can be used to investigate suspected incidents involving SQL Server data. We consider how SQL Server forensics differs from traditional forensics and highlight some of the events that can surface during a traditional investigation that may ...