The Oracle Database 12.2 or later uses Unified Auditing to track activity. However, certain fields are not captured in the syslog of Unified Audit Trail, impacting the completeness of log data. To address this, a simple method of sharing audit records with SIEM tools like WAZUH involves using SQL/JSON functions to stream data in NDJSON format. This can be done using a shell script scheduled with cron.

The “RockYou2024” password leak contains 9,948,575,739 unique plaintext passwords, making it valuable for cybercriminals aiming to perform brute-force attacks. Ensuring the security of Oracle databases is crucial, as weak passwords pose a significant vulnerability. To mitigate this risk, it is recommended to compare database passwords against the 1 million most common ones. A provided SQL script guides this process and demonstrates how to perform the comparison.