Skip to content

Commit e2fc121

Browse files
committed
#3481 sp_Blitz security docs
Updated links on new alerts, added documentation. Closes #3481.
1 parent 8fc2b0b commit e2fc121

2 files changed

Lines changed: 16 additions & 12 deletions

File tree

Documentation/sp_Blitz_Checks_by_Priority.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ Before adding a new check, make sure to add a Github issue for it first, and hav
66

77
If you want to change anything about a check - the priority, finding, URL, or ID - open a Github issue first. The relevant scripts have to be updated too.
88

9-
CURRENT HIGH CHECKID: 257.
10-
If you want to add a new one, start at 258.
9+
CURRENT HIGH CHECKID: 261.
10+
If you want to add a new one, start at 262.
1111

1212
| Priority | FindingsGroup | Finding | URL | CheckID |
1313
|----------|-----------------------------|---------------------------------------------------------|------------------------------------------------------------------------|----------|
@@ -28,6 +28,10 @@ If you want to add a new one, start at 258.
2828
| 1 | Performance | Memory Dangerously Low in NUMA Nodes | https://www.BrentOzar.com/go/max | 159 |
2929
| 1 | Reliability | Evaluation Edition | https://www.BrentOzar.com/go/workgroup | 229 |
3030
| 1 | Reliability | Last good DBCC CHECKDB over 2 weeks old | https://www.BrentOzar.com/go/checkdb | 68 |
31+
| 1 | Security | Dangerous Service Account | https://vladdba.com/SQLServerSvcAccount | 258 |
32+
| 1 | Security | Dangerous Service Account | https://vladdba.com/SQLServerSvcAccount | 259 |
33+
| 1 | Security | Dangerous Service Account | https://vladdba.com/SQLServerSvcAccount | 260 |
34+
| 1 | Security | Dangerous Service Account | https://vladdba.com/SQLServerSvcAccount | 261 |
3135
| 5 | Monitoring | Disabled Internal Monitoring Features | https://msdn.microsoft.com/en-us/library/ms190737.aspx | 177 |
3236
| 5 | Reliability | Dangerous Third Party Modules | https://support.microsoft.com/en-us/kb/2033238 | 179 |
3337
| 5 | Reliability | Priority Boost Enabled | https://www.BrentOzar.com/go/priorityboost | 126 |

sp_Blitz.sql

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5019,8 +5019,8 @@ IF @ProductVersionMajor >= 10
50195019
258 AS [CheckID] ,
50205020
1 AS [Priority] ,
50215021
'Security' AS [FindingsGroup] ,
5022-
'SQL Server is running under the '+ [service_account] +' account' AS [Finding] ,
5023-
'https://www.brentozar.com/go/setup' AS [URL] ,
5022+
'Dangerous Service Account' AS [Finding] ,
5023+
'https://vladdba.com/SQLServerSvcAccount' AS [URL] ,
50245024
'SQL Server''s service account is '+ [service_account]
50255025
+' - meaning that anyone who can use xp_cmdshell can do absolutely anything on the host.' AS [Details]
50265026
FROM
@@ -5056,8 +5056,8 @@ IF @ProductVersionMajor >= 10
50565056
259 AS [CheckID] ,
50575057
1 AS [Priority] ,
50585058
'Security' AS [FindingsGroup] ,
5059-
'SQL Server Agent is running under the '+ [service_account] +' account' AS [Finding] ,
5060-
'https://www.brentozar.com/go/setup' AS [URL] ,
5059+
'Dangerous Service Account' AS [Finding] ,
5060+
'https://vladdba.com/SQLServerSvcAccount' AS [URL] ,
50615061
'SQL Server Agent''s service account is '+ [service_account]
50625062
+' - meaning that anyone who can create and run jobs can do absolutely anything on the host.' AS [Details]
50635063
FROM
@@ -9667,8 +9667,8 @@ IF @ProductVersionMajor >= 10 AND NOT EXISTS ( SELECT 1
96679667
260 AS CheckID
96689668
,1 AS Priority
96699669
,'Security' AS FindingsGroup
9670-
,'SQL Server''s service account is a local admin' AS Finding
9671-
,'https://www.brentozar.com/go/setup' AS URL
9670+
,'Dangerous Service Account' AS Finding
9671+
,'https://vladdba.com/SQLServerSvcAccount' AS URL
96729672
,'SQL Server''s service account is a member of the local Administrators group - meaning that anyone who can use xp_cmdshell can do anything on the host.' as Details
96739673

96749674
END;
@@ -9713,8 +9713,8 @@ IF @ProductVersionMajor >= 10 AND NOT EXISTS ( SELECT 1
97139713
261 AS CheckID
97149714
,1 AS Priority
97159715
,'Security' AS FindingsGroup
9716-
,'SQL Server Agent''s service account is a local admin' AS Finding
9717-
,'https://www.brentozar.com/go/setup' AS URL
9716+
,'Dangerous Service Account' AS Finding
9717+
,'https://vladdba.com/SQLServerSvcAccount' AS URL
97189718
,'SQL Server Agent''s service account is a member of the local Administrators group - meaning that anyone who can create and run jobs can do anything on the host.' as Details
97199719

97209720
END;
@@ -9746,8 +9746,8 @@ IF @ProductVersionMajor >= 10 AND NOT EXISTS ( SELECT 1
97469746
261 AS CheckID
97479747
,1 AS Priority
97489748
,'Security' AS FindingsGroup
9749-
,'SQL Server Agent''s service account is a local admin' AS Finding
9750-
,'https://www.brentozar.com/go/setup' AS URL
9749+
,'Dangerous Service Account' AS Finding
9750+
,'https://vladdba.com/SQLServerSvcAccount' AS URL
97519751
,'SQL Server Agent''s service account is a member of the local Administrators group - meaning that anyone who can create and run jobs can do anything on the host.' as Details
97529752

97539753
END;

0 commit comments

Comments
 (0)