Database forensics: Difference between revisions

Revision as of 15:37, 2 January 2013

Revision as of 00:05, 25 February 2013

Line 15:

The forensic study of relational databases requires a knowledge of the standard used to encode data on the computer disk. A documentation of standards used to encode information in well-known brands of DB such as SQL Server and Oracle has been contributed to the public ___domain.<ref>[http://www.sans.org/reading_room/whitepapers/forensics/1906.php SANS Institute - Forensic Analysis of a SQL Server 2005 Database Server<!-- Bot generated title -->]</ref><ref>[http://www.databasesecurity.com/oracle-forensics.htm Oracle Forensics and Incident Response - databasesecurity.com<!-- Bot generated title -->]</ref>

It is important to note, for evidential purposes, that because the forensic analysis of a data basedatabase is not executed in isolation, the technological frame work within which a subject database exit, is crucial to understanding and resolving questions of data authenticity and integrity especially as it relates to database users.

==Further reading==