brent timothy saner on 26 Mar 2010 19:44:44 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] slightly OT: finding SQL injection in M$ logs with grep


csv can be grepped. :)

And if the output is too ugly for you, there are some cli utils (on linux) than can make it into more friendly formats iirc


(lack of GPG due to message sent via blackberry device)

-----Original Message-----
From: Mike Leone <turgon@mike-leone.com>
Date: Fri, 26 Mar 2010 21:48:36 
To: Philadelphia Linux User's Group Discussion List<plug@lists.phillylinux.org>
Subject: Re: [PLUG] slightly OT: finding SQL injection in M$ logs with grep

Ben Love had this to say:
> Unfortunately, MS SQL logs are entirely Binary.  If you want, you can
> pay lots of money for programs that will examine your SQL logs.  (It's
> Microsoft; all utilities are 3rd party and expensive.  What did you
> think was going to happen?)

Their "SysInternals" tools are free. They have one that will convert 
their binary system event logs to CSV format. So no, not *all* utilities 
are 3rd party and expensive.

Don't think they'll read SQL logs, tho.


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug