Page:1/1
10/3/2005 3:55:01 PM
Suspicious Database Activity
Description
Allows auditing on all database administration, management, security and maintenance operations
For more information on database auditing, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Audit Type
Suspicious Command Issued
Audit Type
User
Client IP
Client Port
Server IP
Server Port
Date Time
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:27:40 PM
SQL Query Text:
grant all to user mel
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:28:40 PM
SQL Query Text:
grant all on pubs2 to user mel
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:28:52 PM
SQL Query Text:
grant all on pubs2 to mel
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:29:15 PM
SQL Query Text:
grant all on suspicious_table to mel
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:29:24 PM
SQL Query Text:
grant all on suspicious_table to mel
Suspicious Command Issued
sa
192.168.1.7
15040
192.168.1.5
6868
8/21/2005 9:29:56 PM
SQL Query Text:
grant all on suspicious_table to mel