This chapter is from the book
This chapter is from the book
This chapter is from the book
This chapter is from the book
Importing Sample Artifacts
The following steps will walk you through the process of creating the INV_308_Scenario database on your local system and loading the supplied scenario artifacts:
- Set the path_to_file and path_to_log_file arguments and run the following syntax to create the Inv_308_Scenario database that we'll use throughout this chapter:
CREATE DATABASE [Inv_308_Scenario] ON PRIMARY ( NAME = N'Scenario', FILENAME = N'path_to_data_file\Scenario.mdf' , SIZE = 51200KB , MAXSIZE = UNLIMITED, FILEGROWTH = 1024KB ) LOG ON ( NAME = N'Scenario_log', FILENAME = N'path_to_log_file\Scenario_ldf' , SIZE = 51200KB , MAXSIZE = 2048GB , FILEGROWTH = 10%) COLLATE Latin1_General_CI_AS GO
- Execute the SSFA_CreateScenariotables.sql script located within the Chapter 11\Scripts folder of the companion DVD within the scenario database you created in step 1.
- Open the SSFA_ScenarioImport.sql script, which can be found within the Chapter 11\Scripts folder on the companion DVD, and set the @FILEPATH variable to the Chapter 11\Artifacts folder on your DVD drive or to the local file location to which you have copied the sample artifacts. Once you have set the variables, execute the script.
Both raw and prepared artifacts are located within the Chapter 11\Artifacts folder of the companion DVD. In addition, WFT execution results retrieved from the victim system can be found within the Chapter 11\Artifacts\WFTSQL\PROD-SQL05\2008_08_31\15_47_29 folder of the companion DVD. You'll need to import the supplied artifacts and reference the WFT results to follow along with the investigation scenario in this chapter.