11. SQL Server Forensic Investigation Scenario

Scenario Overview

In previous chapters, we’ve taken an end-to-end walk-through of SQL Server forensics. We began by defining what SQL Server Forensics is, examining how it can be used to augment traditional forensic investigations, and exploring each stage of the database forensics methodology. During this review, we’ve looked at a variety of SQL Server artifacts, the data within them, and the ways this data can be leveraged to benefit an investigation.

The goal of this chapter is to bring the technical content we’ve covered to life in an investigation scenario that you can walk through. Performing this walk-through will allow you to appreciate the logical progression of events during ...

Get SQL Server Forensic Analysis now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.