I was talking to a customer yesterday and the customer was surprised that database backups can be used to detect malicious database activity from legitimate users and hackers.
ZRM for MySQL stores MySQL binary logs as part of the database backups. The binary logs provide a good audit trail of all database activity. ZRM for MySQL binary log parsing capability, usually used for selective point in time recovery, can also be used to detect malicious database activity using SQL inspection.
ZRM for MySQL plugin interface allows DBAs to write log parser plugin scripts to track the database activity that they are interested in. For example: the following script can be used to detect deletion of data from the PRODUCTS table in the database. This script …
[Read more]