Ferramenta de auditoria de logs do Microsoft SQL Server

A auditoria manual das atividades do banco de dados é uma tarefa árdua. A melhor maneira de fazer isso com eficácia é com uma solução abrangente que simplifica e automatiza o monitoramento de atividades e do banco de dados. A solução também deve permitir que os administradores de banco de dados monitorem, rastreiem, identifiquem instantaneamente a causa-raiz de quaisquer problemas operacionais e também detectem acesso não autorizado a dados confidenciais em tempo real.

• Auditoria de logs do Microsoft SQL Server
• Relatórios de auditoria DDL do SQL Server
• Auditoria de atividades DML do SQL Server
• Auditoria de contas do SQL Server
• Auditoria de atividades do SQL Server
• Mitigar ataques de segurança do SQL Server
• Auditoria granular de dados do usuário nos SQL Servers
• Correlação de logs do SQL Server
• Uso das opções Pesquisar e Pesquisa Avançada em logs do SQL
• Gerenciador de conformidade do MSSQL

• Just ... days left! Are you ready for the GDPR
• Get to know about the challenges and impacts of the all new GDPR

Auditoria de logs do Microsoft SQL Server com o EventLog Analyzer

O EventLog Analyzer é uma ferramenta abrangente de monitoramento de atividades do banco de dados do MS SQL que ajuda a monitorar todas as atividades, acessos e alterações de conta de servidor no banco de dados do Microsoft SQL Server. Aqui estão alguns dos principais recursos do EventLog Analyzer.

• Descoberta automática de SQL Servers:  Descubra automaticamente todos os SQL Servers em sua rede.
• Relatórios prontos para uso:  Realize auditorias com relatórios pré-construídos que fornecem informações detalhadas sobre consultas de linguagem de definição de dados (DDL) e linguagem de manipulação de dados (DML).
• Alertas em tempo real:  Receba alertas instantâneos sobre acesso não autorizado a dados confidenciais ou até mesmo ao próprio servidor do banco de dados.
• Gerenciamento do SQL Server: Gerencie com eficiência contas do SQL Server monitorando as alterações feitas em contas de usuários privilegiados com relatórios detalhados e alertas instantâneos.
• Painel intuitivo: Aprofunde-se no nível de logs brutos e visualize o conteúdo de logs coletados para facilitar a análise da causa-raiz simplificada.

Relatórios de auditoria DDL do SQL Server:

Available SQL Audit Reports

Created Databases | Dropped Databases | Altered Databases | Created Tables | Dropped Tables | Altered Tables | Created Views | Dropped Views | Altered Views | Created Stored Procedures | Dropped Stored Procedures | Altered Stored Procedures | Created Index | Dropped Index | Altered Index | Created Triggers | Dropped Triggers | Altered Triggers | Created Schemas | Altered Schemas | Dropped Schemas

Auditing SQL Server DML Activities:

Available SQL Audit Reports

Selected Tables | Inserted Tables | Updated Tables | Deleted Tables | Execute Command | Recieve Command | Check reference command executed | Inserted Schemas | Selected Schemas | Updated Schemas | Deleted Schemas

Auditing SQL Server Accounts:

Managing and auditing database server accounts is critical in setting up authorizations for resources both inside and out of your database. EventLog Analyzer simplifies your database account management with real-time alerts and predefined reports to:

Available SQL Audit Reports

User Created | User Dropped | User Altered | Login Created | Login Dropped | Login Altered | DataBase Role Created | DataBase Role Dropped | DataBase Role Altered | Application Role Created | Application Role Dropped | Application Role Altered | Credential Created | Credential Dropped | Credential Altered | Own Password Changes | Failed Own password changes | Password changes | Password changes Failed | Password resets | Password resets Failed | Own password resets | Failed Own password resets | Unlocked accounts | Enabled users | Disabled users

Auditing SQL Server Activities:

Available SQL Audit Reports

Database backup report | Database restoration report | Transaction log backup report | Admin authority changes report | Permission changes report | Owner Changes report | Created server roles | Dropped server roles | Altered server roles | Created Server Audits | Dropped Server Audits | Altered server audits | Created Server Audit Specifications | Dropped Server Audit Specifications | Altered Server Audit Specifications | Created Database Audit Specifications | Dropped Database Audit Specifications | Altered Database Audit Specifications | Changed Audit Sessions | Shutdown and Failure Audits | Trace Audit C2 On | Trace Audit C2 Off | Started Trace Audits | Stopped Trace Audits | Server Startups | Server shutdowns | Logons | Failure logons | Logout Accounts | Top logons based on user | Top logons based on remote hosts | Top failure logons based on users | Top failure logons based on remote hosts | Logons Trend | Failed Logons Trend | Event Trend report

Mitigate SQL Server Security Attacks:

EventLog Analyzer helps mitigate external and internal security breaches by providing detailed reports and real-time alerts on various security attacks that can occur in your database.This solution:

Available SQL Audit Reports

Privilege abuses | Unauthorized copies of sensitive data | Account Lockouts | Storage media exposure | SQL Injection | Denial of Service

Granular auditing of user data in SQL Servers:

Available SQL Audit Reports

Column Modified | Delete Operations | Security Changes | Permissions Information | Last Login Time | Logins Information 

Correlating SQL server logs

Many organizations use correlation as a method to understand and make sense of the connection between different logs originating from different sources. EventLog Analyzer's powerful correlation engine efficiently identifies defined attack patterns within your logs. Its correlation module offers many useful features, including:

• View chronological sequence of logs for every identified attack pattern.
• Set constraints on log fields for fine-grained control over the defined attack patterns. Read more.

Available SQL Audit Reports

Repeated SQL injection attempts in DB | Repeated SQL injection attempts | Suspicious SQL backup activity

Use Search and Advanced Search option on SQL logs

EventLog Analyzer provides a dedicated section for log data search, where you can search the raw SQL logs and detect network anomalies like mis-configurations, applications errors, etc. Click the 'Search' tab in the UI.

• Use the Basic search to precisely pinpoint the exact log entry which caused a security activity and find the exact time at which the corresponding security event had happened.
• Use Advanced Search to search by executing the search against multiple search criterion groups at one time. Read more.

MS SQL compliance manager

Comply with regulations such as the GDPR, HIPAA, SOX, PCI-DSS and more using EventLog Analyzer's integrated compliance management module. The prebuilt compliance report templates cover SQL activities such as DDL changes, DML changes, account changes and more, as required by the regulation. A dedicated compliance dashboard shows successful and failed events along with the instances of non-compliance, if any. You can also choose from prebuilt alerts to notify you of critical compliance issues by email or SMS. These features will help you breeze through compliance audits.

To know more about SQL auditing, download our free solution brief SQL server auditing with EventLog Analyzer

Related videos