Auditing Oracle Databases - Enhance Database Security

Prepare a Linux-based Oracle VirtualBox environment with Oracle database 19c, create a CDB and a PDB, and set up the order entry schema for hands-on course practice.

Install Oracle database 19c software on sv1, configure the environment, disable THP, create a CDB, and run silent installation with a response file before creating the database via dbca.

Set up an Oracle practice environment by configuring auto restart, creating non-cdb and cdb databases, managing snapshots, and importing a data pump dump into the soa and pdp schemas.

Explore Oracle database security tools, learn what each tool does and when to use it, and compare different Oracle database auditing methods.

Explore Oracle database security options and products, including security zones of control (assess, prevent, detect) and tools like auditing, database vault, virtual private database, data redaction, and Oracle Data Safe.

Explore how Oracle database auditing tracks privilege use, privileged user actions, data access, and configuration changes through standard and unified auditing, including modes and fine-grained auditing.

Explore standard auditing in Oracle database, learn to track sql statements, system privileges, and schema objects, and access audit trail records for use in a multi-tenant environment.

Explore standard auditing in Oracle databases, configure the audit trail, and apply statement, privilege, object, and network audit levels using the audit command.

Learn to use standard auditing to audit SQL statements, including applying the audit command for specific sessions, by user, and distinguishing top-level from all statements.

Enable the in session current option to apply to specific sessions and capture sql statements, privileges, and objects with standard auditing, including not exists and logon triggers.

Audit system privileges with Oracle standard auditing, enable or remove privilege auditing options, and view enabled options with dba_priv_audit_opts; understand privilege versus statement auditing and any keyword nuances.

Learn to use standard auditing to audit schema objects, enable and remove schema object auditing options, and retrieve enabled options via dba_obj_audit_opts and all_diff_audit_opts.

Explore standard auditing in Oracle databases and learn the columns and information in the DBA audit trail view. Audit administrative users in multi-tenant environments.

Implement standard auditing in Oracle databases, verify mixed auditing mode, enable and test audit options for sql statements, privileges, and schema objects using a test user and sqlplus.

Enable standard auditing to monitor privilege use, focusing on create session and create table. Observe ip visibility with listener connections and the distinction between all privileges and all statements options.

Enable standard auditing for schema objects with audit system privilege, track delete operations on HR employees, review audit trail with bind variables, and test default object auditing options.

Examine the external audit trail for user operations, configure standard auditing with CIS authorisation, and implement a database trigger to enable auditing for any session, then review audited records.

Learn how unified audit replaces standard auditing in production databases, explore its benefits, and learn to create and manage unified audit policies and retrieve audit records.

Explore unified auditing in Oracle databases, a policy-based, centralized audit trail from multiple sources with named policies and options, read-only in a dedicated schema, with minimal performance impact.

Create unified audit policies to monitor system privileges, actions, object actions, components, and roles, with conditions and container scope, then apply policies, review audit trails, and understand the policy syntax.

Learn to create unified audit policies that audit system privileges, system actions, object actions, and roles, using the create audit policy syntax and component options.

Learn to manage unified audit policies, including top level statements, only top level filtering, and common versus local scopes, plus enabling, disabling, and deleting policies and retrieving audit trail records.

Explore how to configure unified audit policies across root, PDBs, and application roots in a multi-tenant CDB, using container-clause options current or all for local, common, and application common policies.

Apply seven predefined unified audit policies in Oracle 19c, enable them with audit policy statements, and tailor scope with by users, by users with granted roles, and exclusions.

Implement unified auditing in Oracle databases by enabling unified auditing, creating audit policies for privileged actions and roles, auditing data pump, and testing mixed auditing mode in a CDB snapshot.

Enable unified auditing in Oracle, create and test a privilege, actions, and roles auditing policy, and verify audit trails across users.

Demonstrate implementing unified auditing in Oracle databases by creating data pump export policies, auditing main operations, and comparing common versus local audit policies across root and pluggable databases.

Explore the benefits of unified audit and when fine-grained audit (FGA) is needed, and learn to create and manage audit policies and retrieve audit records to enhance database security.

Implement fine-grained auditing (FGA) with Dbms_FGA, create policies for specific columns, enable multi-tenant auditing, and manage audit storage and privileges for select, insert, update, delete, and merge statements.

Learn how to implement fine-grained auditing with the add policy procedure, configure audit conditions and columns, and manage enable, disable, and drop policies, including multi-tenant considerations.

Practice implementing fine-grained auditing (FGA) policies in Oracle to audit select statements, DML, and a specific column, with an event handler and audit trail verification on the Cddb database.

Practice implementing fine-grained auditing policies in Oracle to audit DML statements on the customers table, including column-level auditing and event handlers, and verify the FGA audit trail.

Learn to manage Oracle Database Audit Trail as it grows, relocate it, and move it into the Unified Audit Trail, then export, import, archive, and purge with Data Pump Utilities.

Administer the Oracle audit trail, relocate audit tables, archive and purge, export unified audit trails, and enable syslog or event viewer logging with AWS integration and partitioning considerations.

Save audit records to external bin files when the database runs in read-only mode. Load these files into the unified audit trail with dbms_audit_mgmt.load_unified_audit_files when database opens in read-write mode.

Manage purge and archiving of audit trails using dbms_audit_mgmt to set last archive timestamps, purge by trail type, relocate from system tablespace to c-sox, and automate with purge jobs.

Learn to manage Oracle audit trails by enabling unified audit trail, writing to syslog, and moving audit data to a new tablespace. Practice exporting and importing the unified audit trail.

Set up unified audit trail logging by configuring syslog, restarting services, loading external audit files into the internal audit trail, then verify and clean up audit policies.

Export the unified audit trail to data pump dumps from root and PDB one, then import to show that records are appended, not replaced.

Purge unified and standard audit trails manually and automatically, set UTC archive timestamps, verify purge results, and schedule 24 hour purge jobs with Dbms Audit Mgmt and Dbms Scheduler.

Describe best practices for auditing Oracle databases using the unified audit framework. Plan scope and migration from standard to unified audit, and optimize the audit trail with partitioning and archiving.