Filtering with Multiple SQL Conditions Lab

Activity Overview

As a security analyst in training, I’ve learned how important it is to analyze data from a database to uncover specific, security-relevant details. Often, the information I need depends on more than one condition.

In this lab, I practiced using SQL filters to retrieve information that matched multiple conditions. I also learned how to filter out results that didn’t meet a particular condition.

Specifically, I used the AND, OR, and NOT operators to construct complex SQL queries and fine-tune my search for data.

Scenario

During this lab, I was tasked with retrieving detailed information about employees, their machines, and departmental affiliations from the organization’s database. This information was critical for identifying potential security issues and planning updates.

Here’s what I accomplished:

• First, I filtered and retrieved all failed login attempts that occurred after normal business hours.
• Second, I pulled all login attempts that happened on specific dates.
• Third, I identified logins that didn’t originate from Mexico.
• Fourth, I located information about employees working in the Marketing department.
• Fifth, I retrieved data on employees from either the Finance or Sales departments.
• Finally, I filtered out employees not part of the Information Technology department.

Conclusion

This lab gave me hands-on experience writing SQL queries that handle complex filtering conditions. Specifically, I learned how to:

• Retrieve data that matched multiple filters simultaneously,
• Use AND, OR, and NOT to build logic into my queries, and
• Pull only the data most relevant to a given security scenario.

These skills will be essential as I continue working with SQL to support cybersecurity investigations and reporting.

← Back to Portfolio