SQL doesn't really give us too many tools out of the box to allow us to spot when someone may be up to no good. We can look at the number of failed login attempts in SQL's error log. If you start seeing multiple login attempts, especially for SA or any other suspicious looking user... Continue Reading →