Oracle Incident Response and Forensics

1. Front Matter

   Pages i-xvi

   PDF

2. Data Breach

   • Pete Finnigan

   Pages 1-25

3. Artifacts

   • Pete Finnigan

   Pages 27-91

4. Incident Response Approach

   • Pete Finnigan

   Pages 93-117

5. Reacting to an Incident

   • Pete Finnigan

   Pages 119-153

6. Forensic Analysis

   • Pete Finnigan

   Pages 155-175

7. What To Do Next?

   • Pete Finnigan

   Pages 177-195

8. Back Matter

   Pages 197-199

   PDF

Take the right steps when a breach of your Oracle Database environment becomes known or suspected. You will learn techniques for discerning how an attacker got in, what data they saw, and what else they might have done. 


This book helps you understand forensics in relation to Oracle Database, and the tools and techniques that should be used to investigate a database breach. You will learn the measures to put in place now to make it harder for an attack to be successful, and to aid in the detection and investigation of future attacks. You will know how to bring together tools and methods to create a holistic approach and investigation when an event occurs, helping you to be confident of your ability to react correctly and responsibly to threats against your organization’s data. 



What You'll Learn

• Detect when breaches have or may have occurred
  
• React with confidence using an organized plan
  
• Determine whether a suspected breach is real 
  
• Determine the scope of data that has been compromised
  
• Preserve evidence for possible criminal prosecutions
  
• Put in place measures to aid future investigations

Who This Book is For


Database administrators, system administrators, and other technology professionals who may be called upon to investigate breaches of security involving Oracle Database

• Intrusion
• Oracle Database
• Evidence preservation
• Forensic Analysis
• SANS 509
• Identity and Accountability
• Artifact Collection
• Forensic Analysis
• Audit trails

• Acomb York, United Kingdom

  Pete Finnigan

Pete Finnigan is the founder and CEO of PeteFinnigan.com Limited, a company based in York, UK that specializes in helping customers secure data held in their Oracle databases. He has assisted customers all over the world in performing security audits of their Oracle databases. He also has assisted clients with Oracle incident response and forensics, and design and implementation work on Oracle features such as Virtual Private Database (VPD), encryption, masking, and many more services. Pete also provides very popular detailed training on many aspects of Oracle Security. He has spoken many times at conferences around the world on the subject of Oracle security.

Pete is an Oracle ACE for security and also a member of The OAKTable network of Oracle scientists. He graduated from university in Leeds, UK with an honors degree in electronics and electrical systems.

Pete authored the books SANS Oracle Step-byStep Guide version 1 and version 2 and also co-authored the book Expert Oracle Practices. He can be found on Linked In, Facebook, Twitter, and his company's website.

 

Policies and ethics