Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts
Different Database management systems (DBMS) were developed and introduced to store and manipulate data. Microsoft SQL (MSSQL) Server one of the most popular relational DBMS used for large databases. With the increasing use of databases, intentional and unintentional accidents on databases are incre...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Universitas Sanata Dharma
2023-06-01
|
| Series: | International Journal of Applied Sciences and Smart Technologies |
| Online Access: | https://e-journal.usd.ac.id/index.php/IJASST/article/view/4611 |
| _version_ | 1797803314518163456 |
|---|---|
| author | Shadi Khaled A. Zakarneh |
| author_facet | Shadi Khaled A. Zakarneh |
| author_sort | Shadi Khaled A. Zakarneh |
| collection | DOAJ |
| description | Different Database management systems (DBMS) were developed and introduced to store and manipulate data. Microsoft SQL (MSSQL) Server one of the most popular relational DBMS used for large databases. With the increasing use of databases, intentional and unintentional accidents on databases are increasing dramatically. Therefore, there is a great need to develop database forensic investigation (DBFI) tools and models. The temporal table is a new feature introduced with MSSQL server 2012 for track changes, database audit, data loss protection, and data recovery. In addition, the extended events another new feature introduced with MSSQL server 2008 for database performance troubleshooting. This study focused on DBFI in the MSSQL server using temporal tables and extended events artifacts. The experiment is conducted and the results have presented the use of the temporal tables and extended events artifacts in analyzing and determining the internal unauthorized modification on the database. |
| first_indexed | 2024-03-13T05:19:59Z |
| format | Article |
| id | doaj.art-3c72049c1abf410590b377f3e6856468 |
| institution | Directory Open Access Journal |
| issn | 2655-8564 2685-9432 |
| language | English |
| last_indexed | 2024-03-13T05:19:59Z |
| publishDate | 2023-06-01 |
| publisher | Universitas Sanata Dharma |
| record_format | Article |
| series | International Journal of Applied Sciences and Smart Technologies |
| spelling | doaj.art-3c72049c1abf410590b377f3e68564682023-06-15T14:29:28ZengUniversitas Sanata DharmaInternational Journal of Applied Sciences and Smart Technologies2655-85642685-94322023-06-015111610.24071/ijasst.v5i1.46112589Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events ArtifactsShadi Khaled A. Zakarneh0Palestine Technical University- KadooreiDifferent Database management systems (DBMS) were developed and introduced to store and manipulate data. Microsoft SQL (MSSQL) Server one of the most popular relational DBMS used for large databases. With the increasing use of databases, intentional and unintentional accidents on databases are increasing dramatically. Therefore, there is a great need to develop database forensic investigation (DBFI) tools and models. The temporal table is a new feature introduced with MSSQL server 2012 for track changes, database audit, data loss protection, and data recovery. In addition, the extended events another new feature introduced with MSSQL server 2008 for database performance troubleshooting. This study focused on DBFI in the MSSQL server using temporal tables and extended events artifacts. The experiment is conducted and the results have presented the use of the temporal tables and extended events artifacts in analyzing and determining the internal unauthorized modification on the database.https://e-journal.usd.ac.id/index.php/IJASST/article/view/4611 |
| spellingShingle | Shadi Khaled A. Zakarneh Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts International Journal of Applied Sciences and Smart Technologies |
| title | Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts |
| title_full | Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts |
| title_fullStr | Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts |
| title_full_unstemmed | Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts |
| title_short | Forensic Investigation in SQL Server Database Using Temporal Tables & Extended Events Artifacts |
| title_sort | forensic investigation in sql server database using temporal tables extended events artifacts |
| url | https://e-journal.usd.ac.id/index.php/IJASST/article/view/4611 |
| work_keys_str_mv | AT shadikhaledazakarneh forensicinvestigationinsqlserverdatabaseusingtemporaltablesextendedeventsartifacts |