Siem tools are important nowadays. Tons of people are still using audits to collect information of Database Servers on premise. Next to this most of you collect DML logs for identifying threads and defending their databases against threads. Tools like Defender for SQL help. The different tools that are used like ArcSight or other tools.

Nor the audits, nor the DML logging is written in one place. Also the data collected is in most cases not enough to cover soft controls that your company requires. Also, interesting is that you will find out that the Audit and DML data is duplicated. This waste can cost a lot of money

There is a way how you can work using both Audit Events (or xevents) from one source and also check on the health of your databases, on premise but also in Azure. How can you get alerts ourself?

Curious?

Let me get you on the right track!

Session about enhancing the security of your databases on premise and in cloud.