I'm looking into Snort to carry our basic intrusion detection, but finding it hard going. What other Intrusion Detection software is there that is good to use for SQL Server?
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve." – tlng05, Stephane, Community, Xander, schroeder
You should look not into IDS technologies but Database Activity Monitoring (& Prevention). DAM(P) software shims itself in to watch all SQL queries and results and uses a combination of generic rules and guided knowledge to detect and in some cases prevent inappropriate use.
An IDS will catch SQL injection, which is more specifically aimed at web applications (and impacts databases as an end-state). It generally won't have any rules specific to normal database operations.