"Help, my content is gone!" - Make your content part of your audit trail with the help of revisions

Of course, you should do everything you can to prevent an attacker from compromising your site. But part of every serious security strategy is having a plan for when something _does_ go wrong.

If one of your Drupal user accounts is compromised it is of great importance to be able to reconstruct after the fact who did what and when. By enabling proper revision handling for all your Drupal entities you can make your site content part of your audit trail to quickly identify exactly what happened and to recover from it.

In this session, we will dive into Drupal's built-in revisioning capabilities and how to best make use of them for the purposes of a proper audit trail.

We will discuss best practices, pitfalls, and limitations of the system as well as explore the ecosystem of contributed modules that expand on and enhance the core revisioning APIs."

Transcript

1. "Help, my content is gone!" Make your content part of your audit trail with the help of revisions
2. About me Tobias Zimmermann drupal.org/u/tstoeckler @tstoeckler
3. Friday, 14:30
4. Attacks Stolen login SQL injection Code execution ( uid > 1 )
5. Measures Mitigation Audit trail
6. Mitigation: Permissions The fewer, the better
7. Mitigation: Permissions The fewer, the better Use roles
8. Mitigation: Permissions The fewer, the better Use roles Review continuously
9. Mitigation: Permissions The fewer, the better Use roles Review continuously
10. Measures Mitigation Audit trail
11. Audit trail: What happened? Created content Modified content Deleted content
12. Measures Mitigation Audit trail
13. Audit trail: Undo Created content Modified content Deleted content
14. Audit trail: Undo Created content Modified content Deleted content
15. Audit trail: Reverting modified content Revisionable storage Nodes Custom blocks Media Terms* Menu links Users … …
16. Audit trail: Reverting modified content Automatic revisions
17. Audit trail: Reverting modified content Automatic revisions
18. Audit trail: Reverting modified content Automatic revisions
19. Audit trail: Reverting modified content Revisioned references Entity Reference Revisions aragraphs
20. Audit trail: Undo Created content Modified content Deleted content
21. Audit trail: Reverting modified content Revision overview Entity API Maybe in Drupal 8.6.0*
22. Audit trail: Reverting modified content Diff
23. Audit trail: Undo Created content Modified content Deleted content
24. Audit trail: Fake delete Hide unpublished content
25. Audit trail: Fake delete Hide archived content
26. Audit trail: Fake delete Trash
27. Audit trail: Undo Created content Modified content ! Deleted content
28. Questions?
29. What did you think? Please rate this session https://www.surveymonkey.com/r/QTLXNVQ