Activity: Implementing Azure Defender for SQL to detect SQL injection and brute-force attacks

Earlier in the chapter, we learned that Advanced Threat Protection automatically detects and alerts you about security issues such as SQL injection, brute-force attacks, and anonymous access.

In this two-part activity, we'll simulate SQL injection and a brute-force attack and study the email alerts raised by Advanced Threat Protection:

1. To configure email alerts for Advanced Threat Protection, open the Azure portal and then open the SQL server you want to configure alerts for.

   Under the Security section, select Security Center. Provide the email address that will receive the notifications, under the ADVANCED THREAT PROTECTION SETTINGS heading, as shown here:

   

   Figure 6.103: Security Center page

2. Click Save to save the settings.

Part 1: Simulating SQL injection

To simulate an SQL injection attack, perform the following steps:

1. Connect to the toystore database...