mssql

$ target-query <path/to/target> -f mssql

Details

Module	os.windows.log.mssql.MssqlPlugin
Output	records

Module documentation

Return information related to Microsoft SQL Server.

Currently returns ERRORLOG messages. These log files contain information such as:

• Logon failures

• Enabling/disabling of features, such as xp_cmdshell

References:

• https://learn.microsoft.com/en-us/sql/relational-databases/logs/view-offline-log-files

Function documentation

This is a namespace plugin. This means that by running this plugin, it will automatically run all other plugins under this namespace:

• mssql.errorlog