11. SQL Server Forensic Investigation Scenario
In previous chapters, we’ve taken an end-to-end walk-through of SQL Server forensics. We began by defining what SQL Server Forensics is, examining how it can be used to augment traditional forensic investigations, and exploring each stage of the database forensics methodology. During this review, we’ve looked at a variety of SQL Server artifacts, the data within them, and the ways this data can be leveraged to benefit an investigation.
The goal of this chapter is to bring the technical content we’ve covered to life in an investigation scenario that you can walk through. Performing this walk-through will allow you to appreciate the logical progression of events during ...