• Search
• Free Magazines
• Newest Links
• Categories
• Register
• Login

Oracle Forensics Part 1: Dissecting the Redo Logs

Added by Papergrl

Description: This paper represents the first in a series of papers on performing a forensic analysis of a compromised Oracle database server. The research was performed on an Oracle 10g Release 2 server running on Windows. It is important to note that just because something is the way it is in this version of Oracle running on Windows it may not be true of another version of Oracle running on a different operating system. That said, this paper will still provide guidance to a forensic examiner that needs to perform an analysis. Further, as and when I have new information with regards to the "correctness" of this paper as it relates to other systems I will update this paper.