Digital Forensics in Small Devices: RFID Tag Investigation

authentication mode) can be identified by using the following xp_loginconfig
extended procedure (Fowler, 2009).
:out E:\LoginConfig.txt
Master..xp_loginconfig
GO
After running the above mentioned code, the result was saved into the output
file named “LoginConfig.txt”. According to the result (Figure 4.25), the
authentication mode used by the backend database, SQL Server 2005, was
identified.
Figure 4.25: Authentication mode used by the backend database server
Hence, the configured login authentication mode was “Mixed” in which both
SQL Server 2005 and Windows user accounts were allowed to gain access to
the backend server.
4.2.3.4.2 Backend Database Server’s Authorization Catalogs of SQL
Server
After acquiring the authentication settings, the collection of authorization
catalogs was performed in order to identify the access levels the user logins had
within the SQL Server.
Object & Statement Permissions
(specific permissions granting or denying
access to database objects)
Authorization data is stored in:
Figure 4.26: Locations of the authorization data
(adapted from Fowler, 2009, p. 196)
99
Implied Permissions
(It assigns permissions via roles
membership)