sql-server - Finding unknown source of data in SQL Server

Question

I have a SQL Server database that is possibly being manipulated by a third party services, such as DTS or VB Script ran from different server.

How do I find out that it is so and how do I find the location of them?

Note: I know it is silly to ask this question as it should be documented etc but I suppose these things happen.

Answer 1

目前还不清楚您要捕获哪些信息，但对于交互式调查，SQL Profiler 将向您显示与服务器的所有连接，如果您愿意，您可以在更长的时间内运行跟踪。

根据您的情况，您还可以查看 Windows 事件日志，甚至使用网络跟踪工具来收集更多信息。这实际上取决于连接的细节以及您想要或需要投入多少工作。

最后，如果您对特定表的数据更改感兴趣，您可以添加使用 SYSTEM_USER 或 HOST_NAME 等函数的审计触发器来记录有关每个 INSERT 或 UPDATE 的信息。