David Litchfield
This talk will start out with a demonstration of an attack against a fully-patched Oracle database server through a web application. Once done we'll explore where and how to gather evidence of the attack.