Database forensics: Difference between revisions

Revision as of 14:52, 19 October 2015

Revision as of 03:23, 24 November 2016

Line 15:

The forensic study of relational databases requires a knowledge of the standard used to encode data on the computer disk. A documentation of standards used to encode information in well-known brands of DB such as SQL Server and Oracle has been contributed to the public ___domain.<ref>[http://www.sans.org/reading_room/whitepapers/forensics/1906.php SANS Institute - Forensic Analysis of a SQL Server 2005 Database Server<!-- Bot generated title -->]</ref><ref>[http://www.databasesecurity.com/oracle-forensics.htm Oracle Forensics and Incident Response - databasesecurity.com<!-- Bot generated title -->]</ref> Others include [[Apex Analytix]].<ref>http://www.bizjournals.com/triad/stories/2004/01/05/story3.html</ref>

Because the forensic analysis of a database is not executed in isolation, the technological framework within which a subject database exitsexists is crucial to understanding and resolving questions of data authenticity and integrity especially as it relates to database users.

==Further reading==