WINDOWS SERVER 2022 · IIS · ASP.NET · MICROSOFT SQL SERVER

Suspicious server activity?

Know where to start.

Create a powerful brand's identity

Find practical checks for suspicious IIS requests, unexpected processes, changed permissions, and unfamiliar SQL Server objects—all in one organized reference.

Get copyable PowerShell and SQL examples, explanations of what to look for, and worksheets to document your findings.

28-page PDF · One-time purchase · Digital download

What you can investigate

Turn “something looks wrong” into a structured review.

Suspicious web requests
Search IIS logs for upload activity, SQL injection probes, traversal attempts, and automated traffic. Learn how to investigate matches without treating every bot as an attacker.

Unexpected server activity
Inspect processes, network connections, services, scheduled tasks, accounts, permissions, and logging coverage.

Unfamiliar database changes
Use date-based SQL queries to find recently added users, tables, stored procedures, triggers, and other database objects.

Evidence and next steps
Preserve useful records, organize recovery checks, prepare customer communications, and assess escalation and reporting needs.

Look inside before you buy

Practical examples you can refer to while you work.

IIS searches with explanations of what a match could mean.

SQL queries with a date you can change for your investigation.

What's Inside the Toolkit

A practical reference to keep beside you. Your download includes:

IIS Log Searches

Search examples for suspicious requests, upload activity, SQL injection probes, and automated traffic.

Powershell Checks

Inspect current processes, connections, services, scheduled tasks, accounts, and permissions.

SQL Server Queries

Find recently created or modified database objects, including tables, stored procedures, and triggers.

Incident Worksheets

Document findings, evidence, response actions, and follow-up work.

Sample Emails

Adapt customer notifications for SaaS and on-premise environments.

Checklists

Organize evidence preservation, investigation, recovery, and reporting decisions.

The Workflow

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Autem dolore, alias, numquam enim ab voluptate id quam harum ducimus.

Step One

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Autem dolore, alias, numquam enim.

Step Two

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Autem dolore, alias, numquam enim.

Step Three

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Autem dolore, alias, numquam enim.

Get your toolkit

Get the Toolkit

$29.99

introductory price

Available through December 31, 2026. Price increases to $49.99 on January 1, 2027.

One downloadable PDF. No subscription.

Questions before you buy

Is this a policy template pack?
It includes incident-record worksheets, but its main focus is practical investigation: what to inspect, commands to use, and how to interpret findings.

Which systems does it cover?
Windows Server 2022 environments running IIS, ASP.NET, and Microsoft SQL Server. SQL Server version and edition differences are noted where relevant.

Do I need technical experience?
Yes. It is intended for authorized administrators who can review commands, adapt paths, and assess changes before using them.

Does it include software or technical support?
No software installation is included. This is a PDF reference, with support limited to purchase and download assistance.

Will it tell me that my server is completely clean?
No. It helps structure an investigation. It cannot detect every compromise or replace professional incident response.

Have a starting point when something looks wrong.

Keep the checks, commands, and documentation examples together—so you can approach your next investigation with a clearer plan.

Educational reference for authorized administrators. Review and test examples for your environment. No guarantee of security, recovery, or compliance.

Sold by Atomic Film LLC Support: info@atomic.film

Built with systeme.io | Privacy policy | Legal | Terms and conditions