|
|
|
Date Submitted:
03/16/08
Hits: 79 Rating:  based on 0 votes
Oracle Forensics Part 2: Locating Dropped ObjectsAdded by VistaSux
Description:
After a successful compromise of a database server an attacker will usually attempt to hide their activities and this may include the dropping and purging of objects that they have created along the way, for example tables, functions and procedures. As this second paper in the Oracle Forensics series will show, even when an object has been dropped and purged from the system there will be, in the vast majority of cases, fragments left “lying around” which can be sewn together to build an accurate picture of what the actions the attacker took – or at least some of their actions. Perhaps, depending upon how quickly an investigation takes place from the incident in question, even all data pertaining to the dropped object or objects may still be found.
Read the Complete Paper |