audit-labs/audit-tools

A collection of scripts, queries, and other goodies you can use in an audit.

clone: git clone https://gitbay.org/audit-labs/audit-tools.git

v1.0.0: databases/sql/

100644 README.md3563
100644 admins.sql6251
040000 passwords/

admins.sql

:r admins.sql
| UserName    | UserType     | DatabaseUserName | Role            | PermissionType | PermissionState | ObjectType           | ObjectName         | ColumnName |
|-------------+--------------+------------------+-----------------+----------------+-----------------+----------------------+--------------------+------------|
| SCOTT       | SQL User     | SCOTT            | NULL            | SELECT         | GRANT           | USER_TABLE           | EMPLOYEES          | NULL       |
| SCOTT       | SQL User     | SCOTT            | NULL            | INSERT         | GRANT           | USER_TABLE           | EMPLOYEES          | NULL       |
| HR          | SQL User     | HR               | NULL            | EXECUTE        | GRANT           | SQL_STORED_PROCEDURE | SP_GET_EMPLOYEE    | NULL       |
| APP_USER    | Windows User | APP_USER         | ApplicationRole | SELECT         | GRANT           | VIEW                 | vw_EmployeeDetails | NULL       |
| APP_USER    | Windows User | APP_USER         | ApplicationRole | INSERT         | GRANT           | USER_TABLE           | EMPLOYEES          | NULL       |
| {All Users} | {All Users}  | {All Users}      | public          | SELECT         | GRANT           | USER_TABLE           | EMPLOYEES          | NULL       |
| {All Users} | {All Users}  | {All Users}      | public          | EXECUTE        | GRANT           | SQL_STORED_PROCEDURE | SP_GET_EMPLOYEE    | NULL       |

passwords.py

python passwords.py
| Name  | Type      | Check Policy | Check Expiration | Reason                                                                                                                                        |
|-------+-----------+--------------+------------------+-----------------------------------------------------------------------------------------------------------------------------------------------|
| user1 | SQL_LOGIN | PASS         | FAIL             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is not enforced.                                      |
| user2 | SQL_LOGIN | FAIL         | FAIL             | Password policy is not enforced. Password expiration is not enforced.                                                                         |
| user3 | SQL_LOGIN | PASS         | FAIL             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is not enforced.                                      |
| user4 | SQL_LOGIN | PASS         | FAIL             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is not enforced.                                      |
| user5 | SQL_LOGIN | PASS         | FAIL             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is not enforced.                                      |
| user6 | SQL_LOGIN | PASS         | PASS             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is enforced. Reviewer to check the expiration policy. |
| user7 | SQL_LOGIN | PASS         | PASS             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is enforced. Reviewer to check the expiration policy. |
| user8 | SQL_LOGIN | PASS         | PASS             | Password policy is enforced. Reviewer to check the assigned policy. Password expiration is enforced. Reviewer to check the expiration policy. |