All Questions

Tagged with
Filter by
Sorted by
Tagged with
0
votes
1answer
18 views

Need help in leveraging MySQL auditing

We are setting up password rotation policy to rotate account/password quarterly. We are also planning to use MySQL/Maria/Percona Auditing. Need to figure out the most efficient and feasible way to ...
2
votes
0answers
65 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
0
votes
1answer
82 views

how to get complementary information from sp_readerrorlog

when auditing what are the failing logins in one of my server, using the sp_readerrorlog procedure I get the following result, when running the following query: EXEC sp_readerrorlog 0, 1, 'Login ...
1
vote
0answers
23 views

MS SQL 2008 R2, security and auditing

I have an 2008R2 SQL Server. There are a few AD groups added to the logins. Each group must have some permissions (and only these permissions if possible). Can someone help me with a few questions: ...
0
votes
1answer
2k views

What's the difference between aud$ and dba_audit_trail tables in Oracle database?

I'm studying about audit in Oracle database and when I configure the audit using audit_trail = db the Oracle stores in the two tables
1
vote
3answers
190 views

Login report of Sysadmin

We have got a requirement to provide login report from SQL Server for Sysadmin only - This would have log-in date and time when anyone logged into SQL server having sysadmin privilege. Is there ...
0
votes
1answer
57 views

Audit MariaDB Which User Account Privileges Are Being Used

I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account. This database is being provided as a service out to many ...
1
vote
2answers
995 views

Oracle Database Security - Audit Trail for specific user and specific module application

I want to enable audit trail for specific user, but only for sessions when this user connect to database using one specific module applications. For ex. I want to enable audit trail for user test1 ...
0
votes
1answer
62 views

Track MySQL Procedure Changes in MySQL

We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did ...
0
votes
0answers
1k views

Find Who Disabled Logins in SQL Server

Someone disabled lot of SQL Server logins on one of our SQL Server 2014 boxes yesterday, causing a major outage for some of our applications. I need to find out who disabled those logins. Is there a ...
1
vote
2answers
226 views

Is there an equivalent to Azure SQL Threat Detection for on-premise database servers?

Due to GDPR, we are seeking software to help identify malicious activity or data breaches from our production SQL Server. It seems if we were using Azure, this is a flick of a switch. What is ...
2
votes
3answers
993 views

Logins Not being used in last one month

I have a requirement to create a query which can get the logins details which were not used in last one month. I have tried several way like extended events and audit tracing. But i'm unable to get ...
0
votes
2answers
776 views

Auditing sysadmin members by a specific group

A Sql Server 2012 Database Audit performs an audit on sysadmins when you specify the principal DBO. However, this causes ALL the sysadmins to be audited. What configuration or solution can be used to ...
2
votes
2answers
2k views

Audit Plugin on Ubuntu: CONTROL [main] Failed global initialization: FileNotOpen: Failed to open “/path” : exit status 1

We use MongoDB 3.2.11 and try to enable Audit. New in version 2.6. MongoDB Enterprise includes an auditing capability for mongod and mongos instances. The auditing facility allows ...
1
vote
1answer
225 views

Auditing - sp_send_dbmail from server-level triggers failed

I have a server-level trigger to send a mail when a database is created. I have a few users in the db_creator server role. The trigger fails for these users because they don't have permissions to ...
1
vote
0answers
253 views

How do I find the identity of a failed connection request

I have two Microsoft SQL servers, one running 2008 R2 Enterprise, one running 2012 Enterprise. Both are logging lots of failed connections requests due to untrusted domain : =============== SSPI ...
0
votes
2answers
282 views

Notify when database is accessed in any manner

I'm using SQL Server 2012. Is there a way to receive a notification (email/log etc..) if a database or table in a database is touched in anyway (e.g. CRUD via Stored Procs or tables opened via ...
2
votes
3answers
2k views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
5
votes
1answer
361 views

Auditing database administrator actions with SQL Server 2014 Standard

We have a requirement to audit database administrator access to customer databases - at a minimum, knowing which customer database they were accessing (and ideally why). Without upgrading to SQL ...
1
vote
1answer
465 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
1
vote
0answers
58 views

MySql Audit Changes from Db Admin, Security

I know that you can use triggers (before insert, update, delete) to track the changes in history tables. But this only works if the changes are made by the applications. But in some circumstance, ...
0
votes
1answer
1k views

Audit DML operations on MySQL Tables

We have several MySQL 5.0 databases. We've been having security problems, like records being modified without authorization. We need to implement some kind of audit on DML operations identifying ...
2
votes
2answers
1k views

How do I maintain more audit history?

I created a SQL Server audit and when I view the audit logs I only see today’s audit. I am saving it to a file and I want to store audit for one year. Is there a way to store database and server audit ...
-5
votes
3answers
6k views

How database administrators can see my requests to SQL Server?

I'm a SQL Server 2008 user. I have access to some tables. I need to request few columns from table as I usually do. But I need to do it once (for example) in 5 seconds and system administrators ...
0
votes
2answers
7k views

Saving every mysql user login attempts

Is there a way to save the username and the IP from which the user tries to login to a MySQL server?? Enabling general-log seems to log everything but that seems to write too much details taking more ...
4
votes
2answers
417 views

Windows Storage Server, SQL Server, regular files — means to protect from insider threats?

This is my first post here, and I am by no means qualified as a Windows Server or Storage Server 2008 or SQL Server 2008 administrator. I am mostly a Unix guy, however tasked with a job to investigate ...
8
votes
4answers
329 views

What would I need to do to make sure my DB policies have to pass a security audit?

I have an audit coming up, and I was wondering what physical, electronic, and logical access controls an auditor would look for when auditing a database for an ERP system. I'm really new to this ...