Allen Dunn
My feedback
1 result found
-
31 votes
An error occurred while saving the comment An error occurred while saving the comment
Allen Dunn
commented
Create an alert to monitor server SERVERPROPERTY results.
i.e. select SERVERPROPERTY('Edition') retrieves instance edition.A scheduled check against default results could discover any unauthorized changes to the server instance such as IsClustered, IsFullTextInstalled, IsIntegratedSecurityOnly, IsSingleUser, IsSyncWithBackupetc, etc.
An error occurred while saving the comment
Allen Dunn
commented
Create an alert to monitor Database properties.
i.e. select * from sys.databases retrieves the settings for all the databases.A scheduled check against default results could discover any unauthorized changes to the databases such as compatibility_level, UserAccess, Collation, IsTornPageDetectionEnabled, SQLSortOrder, etc.
Allen Dunn
supported this idea
·
Create an alert to monitor instance global configuration settings.
i.e. the below retrieves the global configuration settings.
EXEC sp_configure 'show advanced option', '1'
RECONFIGURE
EXEC sp_configure
A scheduled check against default results could discover any unauthorized changes such as 'allow updates', 'awe enabled', 'blocked process threshold', 'c2 audit mode'. etc