---
id: 8190
title: "Maintaining Persistence via SQL Server – Part 2: Triggers"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/maintaining-persistence-via-sql-server-part-2-triggers/"
published_at: "2016-04-11T00:00:00Z"
tags: ["red-team", "detection", "triggers", "persistence", "sql-server", "powerupsql"]
phying_url: "https://phying.com/item/8190"
lang: en
---

# Maintaining Persistence via SQL Server – Part 2: Triggers

## Summary

Shows how DDL, DML, and logon triggers in SQL Server can be abused for persistence, provides a lab and detection guidance, and adds Get-SQLPersistTriggerDDL to PowerUpSQL.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2016-04-11T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/maintaining-persistence-via-sql-server-part-2-triggers/
- **Phying News:** https://phying.com/item/8190