Database is missing! Search for the root cause

Suppose one day the administrator comes to the office, as he always does, to perform his administrative tasks in Sql Server Databases, and to his surprise discovers that the database is missing. He does not know who dumped him, or he was from an external party or SQL injection, etc .... where you can start the investigation and what important parameters / results should happen to find the main reason for Drop DB. Like what the magazines check and what information needs to be researched?

+3
source share
1 answer

There is a defaul run managed by SQL Server in the log file in the c: \ Program Files folder ... You can view this file with the SQL command. For example, to see the log_19.trc file, you can run a command, for example

SELECT * 
FROM fn_trace_gettable
('C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\log_19.trc', default)

This will probably show when and who dumped the database. More information can be found here ...

+2
source

Source: https://habr.com/ru/post/1763750/


All Articles