Rant: Is It an Effective Control or Not?

This is spurred on by a comment a pen tester made. He was referring to a particular technology and said something to the effect of, "What do you expect? It's 30 year-old technology." I was stunned when the comment was relayed to me. My response...

SQL Server Audit: Magic without a Wizard

In SQL Server 2008, Microsoft introduced SQL Server Audit. This is much better than anything we had before, and is likely to meet the needs of all but the largest, or most highly-regulated industries. SQL Server 2008 Enterprise Edition includes all of the features, whereas SQL Server 2008 Standard Edition only provides a subset. What is most attractive about it, is that it is easy to administer, as Thomas LaRock explains.

Imaginative Auditing with Rollback (Undo) and RollForward (Redo) Part I

Using an audit table to rollback changes to data might be a nice addition to many applications. David McKinney's new series looks at how you can use this data for RollBack or RollForward.

Auditing Failed Logins in SQL Server

An auditor has taken a look at our SQL Servers and has told us that we need to audit login failures to the SQL Servers themselves. How do we do this?

Auditing

Analyzing SQL Server Permissions

This article shows the steps to analyze SQL Server logins and permissions to ensure that there are no logins and users that exist who are have unnecessary access

Filtering DML Statements

Filtering DML statements by loginname , host name or application name

ETL Auditing

This Article shows a method to audit ETL-Processes to be able to retrace processes and affected data.

Monitoring Changes in Your Database Using DDL Triggers

Auditing and monitoring activity in your databases is becoming more and more important all the time. New author David Dye brings us a short introduction to using DDL triggers to help.

Database Audit Specifications in SQL Server 2008

This is the final article of a three part series on Auditing in SQL Server 2008. This article shows how to setup a Database Audit Specification.