Graphically Display Database Transactions to Enhance Database Forensics

摘要

Database forensics presents a set of unique challenges and these may contribute to the reason for the lack of available tools and methods for database forensics. Yet considering the pervasiveness of databases in society, the amount of sensitive data stored within these repositories, and the number of data breaches, it is perplexing why there are not more database forensic software applications. This paper contains a discussion of a design for the graphical display of database transactions from a MySQL database. Using tools such as Elasticsearch and Kibana to aggregate the log files and pre-process the data into an intelligent format facilitates the expedient analysis of volumes of database transactions. The capability to search through terabytes of data within mere seconds and visually display this data is invaluable and considered as the vital contribution of this work.