SQL Server Audit Log Event ID 24323
24323: A column encryption key was viewed (action_id VW; class_type CK)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command was issued that included viewing column encryption key
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server. |
| Authorization result |
If the command passed authorization checks. |
| Session ID |
ID of the session on which the event occurred. |
| User |
User |
| Server |
Server |
| Database |
Database affected by the event. |
| Statement |
Transact-SQL statement |
Supercharger Free Edition
This Event Is Produced By
Which Integrates with Your SIEM
A column encryption key was viewed
A command was issued that included viewing column encryption key
Action Group: DATABASE_OBJECT_CHANGE_GROUP
Occurred: 11/7/2016 8:54:49.0000000 PM
Authorization result: Access allowed
Session ID: 141
User: TEST\STAGING$
Server: STAGING\SQLSERVER2016
Database: ReportServer$SQLSERVER2016TempDB
Statement: SELECT db_id() as database_id,
COUNT_BIG(DISTINCT(V.column_encryption_key_id)) [ColumnEncryptionKeyCount],
encryption_algorithm_name
FROM
sys.column_encryption_keys K WITH(nolock) JOIN
sys.column_encryption_key_values V WITH(nolock)
ON K.column_encryption_key_id = V.column_encryption_key_id
GROUP BY encryption_algorithm_name
HAVING
COUNT_BIG(DISTINCT(V.column_encryption_key_id)) > 0
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24323
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection