-创建将对ping canarytoken进行ping的存储过程CREATE proc ping_canarytokenASBEGIN声明用户名 varchar（最大值）， base64 varchar（max），@ tokendomain varchar（128），@ unc varchar（128）， 尺寸 整型 做完了 整型 随机 varchar(3);
--setup the variables
set @tokendomain = 'qo2dd6tftntl1pej9j68v31k6.canarytokens.com';
set
size = 128;
set
done = 0;
set
random = cast(round(rand()*100,0) as varchar(2));
set
random = concat(
random, '.');
set
username = SUSER_SNAME();
--loop runs until the UNC path is 128 chars or less
while
done <= 0
begin
--convert username into base64
select
base64 = (SELECT
CAST(N'' AS XML).value(
'xs:base64Binary(xs:hexBinary(sql:column(«bin»)))'
, 'VARCHAR(MAX)'
) Base64Encoding
FROM (
SELECT CAST(
username AS VARBINARY(MAX)) AS bin
) AS bin_sql_server_temp);
--replace base64 padding as dns will choke on =
select
base64 = replace(
base64,'=','-')
--construct the UNC path
select @unc = concat('\\',@base64,'.',@random,@tokendomain,'\a')
— if too big, trim the username and try again
if len(@unc) <=
sizeset
done = 1
else
--trim from the front, to keep the username and lose domain details
select
username = substring(
username, 2, len(
username)-1)
end
exec master.dbo.xp_fileexist @unc;
END
--add a trigger if data is altered
CREATE TRIGGER TRIGGER1
ON TABLE1
AFTER INSERT
AS
BEGIN
exec ping_canarytoken
end