ESNC provides SAP forensic analysis services for security incident response teams and for law enforcement. Whether it is an SAP system breach or a case of corporate fraud, the financial risks of economic crime can be immense. We help to investigate, analyze and resolve potential crises and provide forensic advisory services upfront to prevent them.
We help by:
- Evidence extraction – gathering case data based on incident type
- Evidence preservation
- Planning the incident response
- Data-mining forensics evidence
- Providing support for preventing future SAP security incidents
SAP Security Investigations
SAP systems are complicated in nature. Finding and correlating incident data in SAP applications, SAP security audit logs and other sources of information is resource intensive. A proper SAP forensics initiative must focus on understanding business and financial processes before attempting analysis of various log data and change documents. Critical information can be hidden between the rows of SAP tables such as BKPF, BSEG, BSIK, BSAK; EKKO, EKPO; MARA, MARB, MARC, MBEV, VBAK or VBRK.
Our SAP consultants are experienced both in the business related parts of SAP modules and in technical functionality.
ESNC Forensics Toolkit for SAP Applications
We provide a forensics toolkit for SAP security teams and investigators which they can run locally on their workstation.
Our SAP forensics toolkit allows checking for data in the systems, table search, and viewing/importing raw SAP security audit logs offline. It also allows searches to be made directly on the SAP security audit logs and provides extended definitions for an easier interpretation.
ESNC Forensics Toolkit also supports data extraction and export. Supported SAP ABAP versions are R/3 4.6C (4.6D Kernel), SAP NetWeaver 7.0 and later.
Please contact us at forensics@esnc.de to discuss your requirements and how we can best match to them.