Andreas Wolter

Evading Data Access Auditing in Microsoft SQL Server – and how to close the gaps - Andreas Wolter

Evading Data Access Auditing in Microsoft #SQLServer 🕵️
this article demonstrates data access that is not captured by common Audit definitions and how to ensure also indirect access to data is audited andreas-wolter.com/en/202508_ev...

Nice technical insights. - Happy to see my old article being of some use still :) - Thanks for mentioning.

Recommendation for Security Auditing for databases - with example for Microsoft SQL Server - Andreas Wolter 20

Article: recommended minimum security audit definition for database systems, using Microsoft #SQLServer as example:
Audit every change to the system’s security configuration. andreas-wolter.com/en/202507_re...

Managing Database Sprawl: Finding Control in a Growing Environment | LinkedIn As database environments scale, so do complexity and cost. From forgotten dev instances to sprawling clusters of mission-critical workloads, database sprawl creates risks that are easy to ignore—and t...

Tomorrow: live Roundtable on a growing issue: database sprawl. It wreaks havoc on performance, security, and cost. We’ll talk openly about how to assess what’s running and take back control. If this has become a challenge in your organization, I hope you’ll join us. www.linkedin.com/events/manag...

10 hours of SQL Server under attack – takeaways - Andreas Wolter

What happens if you leave #SQLServer exposed to the internet? As you may have seen, that is exactly what I did for my PreCon at the #SQLSaturday New York City conference. Here I am sharing what happened:
10 hours of SQL Server under attack – takeaways
andreas-wolter.com/en/2505_sqls...

Hacking attempts on SQL Server from Iran

And the winner of the first hacking attempt on the #SQLSaturday NYC Performance Monitoring lab environment is: #Iran 👏 applause applause.. 😀
I am taking bets for the main event Friday!

Next Thursday, 4/17, at the NTSSUG user group meeting: how to approach #DataSecurity for #SQLServer and #AzureSQL from a strategic perspective, live at the Microsoft office in Irving, TX. Sign up for the free event here: www.meetup.com/north-texas-...

31 days left: #SQLServer Performance Monitoring at #SQLSaturday in New York City on May 9th!
Your chance to test your knowledge and analyze my server's workload live during the session! - using Extended Events or DMV queries from your own machine: www.eventbrite.com/e/practical-...

Performance Monitor

Are you interested in learning how to troubleshoot performance issues on your own, rather than relying on costly consultants like me? 😉
Join me and others for my PreCon on #SQLServer Performance Monitoring at #SQLSaturday in New York City on May 9th!
Sign-up here: www.eventbrite.com/e/practical-...

SQL Audit bug

#SQLServer #security admins, attention: #Auditing is missing attempts to change permissions, leading to #repudiation and miss elevation attempts
Please upvote for bug-fix
andreas-wolter.com/en/2502-sql-...

The challenges for least privilege: When sysadmin is still required in Microsoft SQL Server - Andreas Wolter

The challenges for least privilege: When sysadmin is still required in Microsoft #SQLServer
a fresh update on the sysadmin requirements for SQL Server 2022 - and why CONTROL SERVER can be dangerously misleading. andreas-wolter.com/en/least-pri... #DataSecurity

Protecting database data at rest: Transparent Data Encryption, Backup Encryption or Always Encrypted - Andreas Wolter

New article out> Protecting database data at rest:
Comparing the different encryption methods SQL Server offers, regarding how well they protect data at rest, and why I don't push for #TDE everywhere.
andreas-wolter.com/en/protectin... #DataEncryption #DatSecurity

Use TLS 1.2 and trusted certificates to encrypt data in transit for all SQL Servers, including development environments - Andreas Wolter

New article: #TLS 1.2 and trusted certificates to encrypt data in transit for all SQL Servers, including development environments andreas-wolter.com/en/tls-trust... #SQLServer #Encryption