Auditing IT components using CAATs

Auditing SQL Server Permissions using CAATs

Before we get into auditing SQL Server permissions a reminder of a few definitions might be helpful...
Posted on 11/10/2012 8:47 AM by Ian Cooke | Comments (3)

Oracle Database Script Passwords

During an audit you may find that shell scripts are used to connect to your Oracle database (these ...
Posted on 9/29/2012 7:27 AM by Ian Cooke | Comments (0)

Auditing SQL Server Configurations using CAATS

The company you are auditing should have a policy on how their SQL Server databases are configured....
Posted on 9/18/2012 6:56 AM by Ian Cooke | Comments (1)

Auditing SQL Server Users using CAATs

Typically application access to a SQL Server database is via one of two methods. Either all users a...
Posted on 9/15/2012 1:42 PM by Ian Cooke | Comments (2)

Auditing SQL Server Passwords

SQL Server allows two methods of authenticating to the database.  You can configure the database to...
Posted on 9/11/2012 3:18 AM by Ian Cooke | Comments (1)

Auditing Oracle using CAATs – Bringing It All Together

The main idea I am trying to advocate with these posts is a simple one. Compare a database you are ...
Posted on 3/29/2012 2:25 PM by Ian Cooke | Comments (1)

Auditing Oracle using CAATs – Miscellaneous Items

We have covered most of the core items that should be consider when performing an Oracle database a...
Posted on 3/27/2012 2:53 AM by Ian Cooke | Comments (0)

Auditing Oracle Audit Configurations using CAATs

The company you are auditing should have a policy on what is being audited within your Oracle datab...
Posted on 3/19/2012 10:55 AM by Ian Cooke | Comments (0)

Auditing Oracle Privileges using CAATs

Before we get into auditing Oracle privileges a reminder of a few definitions might be helpful.A us...
Posted on 3/10/2012 10:42 AM by Ian Cooke | Comments (1)

Auditing Oracle Password Controls using CAATs

As with parameters the company you are auditing should have a policy on password controls.  For Ora...
Posted on 2/27/2012 7:48 AM by Ian Cooke | Comments (0)

Auditing Oracle Parameters using CAATs

The company you are auditing should have a policy on how their Oracle databases are configured.  Mu...
Posted on 2/20/2012 2:37 PM by Ian Cooke | Comments (0)

Auditing Oracle Users using CAATs

Typically application access to an Oracle database is via one of two methods. Either all users acce...
Posted on 2/18/2012 2:15 PM by Ian Cooke | Comments (1)

Auditing Oracle Passwords using CAATs (2)

Once you have the hashes in your CAATs tool (see Auditing Oracle Passwords using CAATs) you may wan...
Posted on 2/10/2012 6:57 AM by Ian Cooke | Comments (0)