header bg

Question:

Which of the following is the most likely explanation in the situation
When performing standard maintenance on a database server, you notice one hour of time missing from the log file during what would normally be regular operation hours. Further investigation reveals that there have been no user complaints about accessibility.

A The server was compromised by an attacker.
Explaination

During regular business hours, it's a database server, and there's nothing in the log? Forget about the fact that a reboot would have occurred somewhere—no one complained about it being down at all. No, we believe this one will need some forensics work. Contact the IR team.