Database forensics: Difference between revisions

Revision as of 21:12, 13 June 2014

Revision as of 18:33, 22 January 2015

Line 15:

The forensic study of relational databases requires a knowledge of the standard used to encode data on the computer disk. A documentation of standards used to encode information in well-known brands of DB such as SQL Server and Oracle has been contributed to the public ___domain.<ref>[http://www.sans.org/reading_room/whitepapers/forensics/1906.php SANS Institute - Forensic Analysis of a SQL Server 2005 Database Server<!-- Bot generated title -->]</ref><ref>[http://www.databasesecurity.com/oracle-forensics.htm Oracle Forensics and Incident Response - databasesecurity.com<!-- Bot generated title -->]</ref>

It is important to note, for evidential purposes, that becauseBecause the forensic analysis of a database is not executed in isolation, the technological frame workframework within which a subject database exit,exits is crucial to understanding and resolving questions of data authenticity and integrity especially as it relates to database users.

==Further reading==