BEGIN:VCALENDAR PRODID: 1 VERSION:2.0 METHOD:PUBLISH X-WR-TIMEZONE: America/Los_Angeles DTSTAMP: 20260427T060950 BEGIN:VEVENT UID: info@vconferenceonline.com SUMMARY:Auditing and Detecting Illicit Activity in SQL Server PRIORITY:0 CATEGORIES:SESSION CLASS:PUBLIC DTSTART:20190523T150000 DTEND:20190523T160006 URL: https://event.vconferenceonline.com DESCRIPTION:While meeting compliance requirements is important, simply matching the standard doesn’t guarantee that your data is safe. Smart attackers craft methods that bypass traditional security hardening recommendations. Many of these methods target the weakest link in security, people, via social engineering. Therefore, we must look at the kind of activity that is happening on our databases and try to spot when access deviates from the typical pattern. 
In this session, we’ll look at what SQL Server gives on on the auditing side, focused mainly around Extended Events. We’ll consider how to best use Extended Events to monitor what’s important so we can try to reduce the noise before having to sift through the events collected. Then we’ll look at what systems outside of SQL Server can do for us in order to help us find breaks in our users’ and systems’ patterns. LOCATION: END:VEVENT END:VCALENDAR