SQL Server Audit Action Group: SCHEMA_OBJECT_CHANGE_GROUP

This group tracks whenever create, alter or drop is executed on a schema object such as a table, view or stored procedure.

If you enable this group in a server audit specification, it will track changes to schema objects in all of the databases of this instance of SQL Server. If you enable the group in a database audit specification, it will track changes to schema objects within that database only.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24132	Issued a create schema object command
24133	Issued a change schema object command
24134	Issued a delete schema object command
24135	Issued a transfer schema object command
24136	Issued a create schema type command
24137	Issued a change schema type command
24138	Issued a delete schema type command
24139	Issued a transfer schema type command
24140	Issued a create XML schema collection command
24141	Issued a change XML schema collection command
24142	Issued a delete XML schema collection command
24143	Issued a transfer XML schema collection command

 

Upcoming Webinars Assessing the Security of Your Active Directory: User Accounts Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard