SQL Server Audit Action Group: TRACE_CHANGE_GROUP

Available in New to:
Database
Audit
Specification 		Server
Audit
Specification 		2012 2016
  •  

This group tracks the execution of TRACE commands.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID Description
24275 Issued alter trace command
24276 Issued start trace command
24277 Issued stop trace command
24278 Issued enable trace C2 audit mode command
24279 Issued disable trace C2 audit mode command

 

Upcoming Webinars
  • Real Life Ethical Hack of a Power Station: Inside the mind of a Hacker on how to Successfully Break in and the Lessons Learned
  • Top 4 Most Dangerous Applications on Every Endpoint; Fighting Back with Detective and Preventive Controls
  • Threat Detection and Hunting for 5 of the Most Common MITRE ATT&CK Techniques: Connection Proxy, Service Execution, Exfiltration, Masquerading, Drive-by Compromise
Additional Resources
    Audit Policy
    •Server Audit Specification
    •Database Audit Specification
    •Audit Action Groups
    •Audit Actions
    •Audit Policy Wizard
     
     
    Home
    		 > 
    SQL Server
    		 > 
    Audit Policy
    		 > 
    Audit Action Groups
    		 > 
    TRACE_CHANGE_GROUP
    User name:
    Password:
      / Forgot?
      Register
    May 2019
    Patch Tuesday    		 "Patch Tuesday: Active Attacks and RDP Vulnerability " - sponsored by LOGbinder
    Follow @randyfsmith
    Home
    Tweet
    Follow @randyfsmith
    About | Newsletter | Contact Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2019 Monterey Technology Group, Inc. All rights reserved.
    Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk.     		Terms of Use | Privacy | Return Policy