SQL Server Audit Action Group: TRACE_CHANGE_GROUP

Available in		New to:
Database Audit Specification	Server Audit Specification	2012	2016
	•

This group tracks the execution of TRACE commands.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24275	Issued alter trace command
24276	Issued start trace command
24277	Issued stop trace command
24278	Issued enable trace C2 audit mode command
24279	Issued disable trace C2 audit mode command

Upcoming Webinars

Building an Incident Response Playbook on the Fly Against Scattered Spider Lateral Movement

Additional Resources

Audit Policy

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard

User name:
Password:
	/ Forgot?
	Register

October 2023 Patch Tuesday	"Patch Tuesday - Four Zero Days; Alert about a WEC/WEF bug " - sponsored by LOGbinder

Home

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2023 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.