Sarpedon Quality Lab

Mastering SQL Server: Performance - Scalability - High Availability - Security. Made in Germany

[Andreas Wolter @AndreasWolter]

Published the final article in my 3-part series about the challenges of auditing access to data in Microsoft #SQLServer, #AzureSQL, and SQL #database in #Fabric: https://t.co/h1z0WzoPUz
Shedding light on several tricky ways to evade auditing

[Ronen Ariely @pitoach]

🚀 Learn how Contained Availability Groups simplify SQL Server 2022 management! 🎤 Join Andreas Wolter, Ex-Microsoft Senior Program Manager, for a demo-packed session! 🗓 Oct 23, 12:00 PM EDT

Register 👉 https://t.co/E0sXOHDoUy

#SQLServer #DataDriven #DBA #DataCommunity

[Andreas Wolter @AndreasWolter]

Article: recommended minimum security audit definition for database systems, using Microsoft #SQLServer as example:
Audit every change to the system’s security configuration. https://t.co/IGC7LS6Rzr

[Sarpedon Quality Lab @SQL_de]

Es gibt einige wirklich kritische Sicherheits-bugs in SQL Server, die mit dem letzten Security Patch gefixt werden. Unbedingt beachten!

[Andreas Wolter @AndreasWolter]

Important Security fixes for #SQLServer 2016–2022: 5 CVE’s of type Elevation of Privilege Vulnerability. Ranging from #SQLInjection via system procedures to permission adjustments and easy to implement. Secure your systems: https://t.co/kfpb25Fw4p

[Andreas Wolter @AndreasWolter]

Published a more elegant and straightforward solution for auditing access to specific data in Microsoft #SQLServer and #AzureSQL, using Data Classification: https://t.co/LVJ7bJtODg

[Sarpedon Quality Lab @SQL_de]

Wichtiger Fund von @AndreasWolter: SQL Auditing (#SQLServer und #AzureSQL Managed Instance) entdeckt bestimmte Berechtigungsänderungen nicht! Während wir auf einen Fix von Microsoft warten, Hinweise wie man damit umgehen kann im Artikel.

[Andreas Wolter @AndreasWolter]

#SQLServer #security admins, attention: #Auditing is missing attempts to change permissions, leading to #repudiation and miss elevation attempts
Please upvote for bug-fix
https://t.co/jOhkXS5HaE

[Sarpedon Quality Lab @SQL_de]

#SQLServer bietet verschiedene Verschlüsselungs-Technologien an. Andreas hat das Thema "Protecting data at rest" zusammengefasst und was man dabei bedenken sollte. Das Ergebnis, das TDE nicht unbedingt besser als Backup #Encryption ist, kommt für einige vielleicht überraschend.

[Andreas Wolter @AndreasWolter]

New article> Protecting database data at rest:
Comparing the different encryption methods SQL Server offers, regarding how well they protect data at rest, and why I don't push for #TDE everywhere.
https://t.co/tp6FwKumeg #DataEncryption #DatSecurity

[Sarpedon Quality Lab @SQL_de]

Daten und Unternehmens-Wissen schützen: Absichern der Datenübertragung zwischen #SQLServer und der Anwendung mit vertrauenswürdigen Zertifikaten. Auch in der Entwicklungsumgebung!

[Andreas Wolter @AndreasWolter]

article: #TLS 1.2 and trusted certificates to encrypt data in transit for all SQL Servers, including development environments
https://t.co/q3XnNXWaaa #SQLServer #Encryption

[Andreas Wolter @AndreasWolter]

latest article: Using Extended Events for Tracing #SQLServer and #AzureSQL DB in compliance with Principle of Least Privilege - Example role separation
https://t.co/zrRSbnHr9H #PolP #DataSecurity

[Sarpedon Quality Lab @SQL_de]

Liebe Kunden: Bitte patcht eure #SQLServer. Patching ist eines der 3 wirksamsten Mittel gegen Cyberattacken.

[Andreas Wolter @AndreasWolter]

Multiple Security Updates for #SQLServer: 3 vulnerabilities for Elevation of Privileges with high impact potential have been found in the engine alone and an additional 9 vulnerabilities for Remote Code Execution and Information Disclosure in Machine Learning Services. Fixes are available for SQL Server versions 2016 up to 2022
https://t.co/z0kFH0TYHZ
#MachineLearningServices #EoP

[Sarpedon Quality Lab @SQL_de]

Vom 7. bis 10. Oktober ist @AndreasWolter, der Gründer von Sarpedon Quality Lab und einer von nur 7 Microsoft Certified Master der Data Platform auf den #SQLDays endlich wieder in Deutschland anzutreffen

[Andreas Wolter @AndreasWolter]

Workshop “Praktisches Performance Monitoring & Troubleshooting für #SQLServer” am 10. Oktober auf den #SQLdays in Erding/Germany https://t.co/LUW2z5IS1G

[Sarpedon Quality Lab @SQL_de]

@KoprowskiT @AndreasWolter Vielen Dank @KoprowskiT !

[Sarpedon Quality Lab @SQL_de]

Wer einen technischen deep dive workshop mit dem einzigen Microsoft Certified Master für #DataPlatform sucht: hier ist die einmalige Gelegenheit, zum ersten Mal seit 6 Jahren wieder in Deutschland, auf den #SQLdays bei München.

[Andreas Wolter @AndreasWolter]

Am 10. Oktober gebe ich nach langer Zeit wieder einen praktischen workshop zu Performance Monitoring unter #SQLServer in Deutschland: Im Rahmen der #SQLDays Konferenz in Erding bei München: Practical Performance Monitoring & Troubleshooting SQL Server. Der Clou: Die Teilnehmer können live mitanalysieren (Voraussetzung: eigenes Laptop mit SSMS)

[Sarpedon Quality Lab @SQL_de]

Sarpedon Quality Lab ist nun offiziell auch in den USA firmiert :-) Das wird insbesondere für unsere Managed Services Kunden interessant sein. @AndreasWolter ist also in der amerikanischen Zeitzone für uns da.

[Andreas Wolter @AndreasWolter]

Happy to share that I founded Sarpedon Quality Lab LLC here in the US.
It will come to no surprise, that I will continue the great partnership with @SQL_de, which I founded 2009 in Germany.

[Sarpedon Quality Lab @SQL_de]

We can confirm that from what we are seeing on systems that we monitor. All security measures matter. Create perimeters and do the fundamentals. #cybersecurity

[780th Military Intelligence Brigade (Cyber) @780thC]

Hackers from Russia’s Foreign Intelligence Agency (SVR) are no longer disengaging from a computer environment once they are discovered but are doubling down, according to Brad Smith, vice chairman and president of Microsoft | https://t.co/5KCzh23F1f @RFERL

[Andreas Wolter @AndreasWolter]

The reactions and interest about my resignation in the #Azure Data Security org have been overwhelming, so I decided to write a bit more about it: https://t.co/s7lKHwikqh
#ProgramManagement #DataSecurity #AzureSQL #Microsoft

[Andreas Wolter @AndreasWolter]

Thanks for giving me the opportunity to speak about #DataSecurity for #SQLServer and #AzureSQL in my new home base with a very engaged audience.

[Sarpedon Quality Lab @SQL_de]

@AndreasWolter Congrats! Welcome back in the field(?) :)

[Andreas Wolter @AndreasWolter]

The latest Data Exposed video with a summary of the #DatabaseSecurity functionalities introduced in 2023 for #SQLServer and #AzureSQL

[Sarpedon Quality Lab @SQL_de]

Interesting article from @Kendra_Little: Microsoft is Breaking Database Compatibility Levels for #SQLServer and #AzureSQL Managed Instance: https://t.co/K8mgUxqqnD