Maintaining Persistence via SQL Server – Part 2: Triggers
Common Information
Type Value
UUID fa91069b-69ca-4066-8e25-627f6e2d1f97
Fingerprint 8e19ba7bb9a24a86
Analysis status DONE
Considered CTI value 0
Text language
Published April 11, 2016, 7 a.m.
Added to db Jan. 18, 2023, 8:37 p.m.
Last updated Nov. 18, 2024, 2:36 a.m.
Headline Maintaining Persistence via SQL Server – Part 2: Triggers
Title Maintaining Persistence via SQL Server – Part 2: Triggers
Detected Hints/Tags/Attributes 41/2/58
Attributes
Details Type #Events CTI Value
Details Domain 201
msdn.microsoft.com
Details Domain 212
technet.microsoft.com
Details Domain 221
gist.github.com
Details Domain 62
stackoverflow.com
Details Domain 1
wateroxconsulting.com
Details Domain 1
sqlandme.com
Details File 3
powerupsql.ps1
Details File 3
dn434042.aspx
Details File 1
testdb.db
Details File 13
sys.dat
Details File 14
s.dat
Details File 14
d.dat
Details File 1
temptrigger_demo_ddl.txt
Details File 1
trigger_demo_ddl.ps1
Details File 2
sys.sql
Details File 3
helloworld.ps1
Details File 1
bb522542.aspx
Details File 1
qt.obj
Details File 1
temptrigger_demo_dml.txt
Details File 1
trigger_demo_dml.ps1
Details File 1
temptrigger_demo_logon.txt
Details File 1
trigger_demo_logon.ps1
Details File 2
sys.obj
Details File 1
invoke-sqlserver-persist-triggerddl.ps
Details File 2
temphelloworld.txt
Details File 1
ms189799.aspx
Details File 1
bb326598.aspx
Details File 1
ms159093.aspx
Details File 1
cc293624.aspx
Details File 1
ms189741.aspx
Details File 1
ms181893.aspx
Details File 1
ms186385.aspx
Details File 1
ms190359.aspx
Details Github username 11
netspi
Details Github username 3
nullbind
Details Url 3
https://raw.githubusercontent.com/netspi/powerupsql/master/powerupsql.ps1
Details Url 2
https://msdn.microsoft.com/en-us/evalcenter/dn434042.aspx
Details Url 2
https://msdn.microsoft.com/en-us/library/cc280663(v=sql.100).aspx
Details Url 1
https://technet.microsoft.com/en-us/library/cc280663(v=sql.105).aspx
Details Url 1
https://gist.github.com/nullbind/6da28f66cbaeeff74ed5.
Details Url 1
https://raw.githubusercontent.com/nullbind/powershellery/master/brainstorming/trigger_demo_ddl.ps1
Details Url 2
https://raw.githubusercontent.com/nullbind/powershellery/master/brainstorming/helloworld.ps1
Details Url 1
https://msdn.microsoft.com/en-us/library/bb522542.aspx
Details Url 1
https://technet.microsoft.com/en-us/library/ms182492(v=sql.90).aspx
Details Url 1
https://stackoverflow.com/questions/13638435/last-executed-queries-for-a-specific-database.
Details Url 1
https://raw.githubusercontent.com/nullbind/powershellery/master/brainstorming/trigger_demo_dml.ps1
Details Url 1
https://raw.githubusercontent.com/nullbind/powershellery/master/brainstorming/trigger_demo_logon.ps1
Details Url 1
https://raw.githubusercontent.com/netspi/powershell/master/invoke-sqlserver-persist-triggerddl.psm1
Details Url 1
https://msdn.microsoft.com/en-us/library/ms189799.aspx
Details Url 1
https://msdn.microsoft.com/en-us/library/bb326598.aspx
Details Url 1
https://wateroxconsulting.com/archives/find-triggers-sql-server-database
Details Url 1
https://sqlandme.com/2011/07/13/sql-server-login-auditing-using-logon-triggers
Details Url 1
https://msdn.microsoft.com/en-us/library/ms159093.aspx
Details Url 1
https://msdn.microsoft.com/en-us/library/cc293624.aspx
Details Url 1
https://msdn.microsoft.com/en-us/library/ms189741.aspx
Details Url 1
https://msdn.microsoft.com/en-us/library/ms181893.aspx
Details Url 1
https://technet.microsoft.com/library/ms186385.aspx
Details Url 1
https://msdn.microsoft.com/en-us/library/ms190359.aspx