ch10ex02_access_solution.accdb
| Incident_Type | Incident_Description |
| 1.0 | Denial of Service |
| 2.0 | Unauthorized connection |
| 3.0 | Unauthorized modification |
| 4.0 | Malicious code |
| 5.0 | Probe |
| Incident_ID | System_ID | Dept_ID | Incident_Type | Incident_Description | Source_Host | Incident_Date | Incident_Time | HowDetected | Compromised |
| 1.2011001E7 | S013 | 2.0 | 3.0 | Unauthorized connection | 72.224.188.162 | 1/3/11 | 12/30/99 | log file | No |
| 1.2011002E7 | S016 | 20.0 | 2.0 | Malicious code | 205.162.40.201 | 1/5/11 | 12/30/99 | violation alert | Yes |
| 1.2011003E7 | S007 | 5.0 | 3.0 | Unauthorized connection | 62.117.64.0 | 1/6/11 | 12/30/99 | log file | No |
| 1.2011004E7 | S011 | 19.0 | 5.0 | Probe | 195.26.128.220 | 1/10/11 | 12/30/99 | violation alert | No |
| 1.2011005E7 | S006 | 3.0 | 2.0 | Malicious code | 75.125.130.100 | 1/12/11 | 12/30/99 | user report | Yes |
| 1.2011006E7 | S004 | 4.0 | 1.0 | Denial of service | 195.34.63.255 | 1/16/11 | 12/30/99 | violation alert | Yes |
| 1.2011007E7 | S017 | 18.0 | 3.0 | Unauthorized connection | 213.135.127.210 | 1/17/11 | 12/30/99 | log file | No |
| 1.2011008E7 | S016 | 20.0 | 2.0 | Malicious code | 62.32.127.180 | 1/19/11 | 12/30/99 | user report | Yes |
| 1.2011009E7 | S011 | 19.0 | 5.0 | Probe | 94.102.95.100 | 1/24/11 | 12/30/99 | violation alert | No |
| 1.201101E7 | S005 | 1.0 | 3.0 | Unauthorized connection | 188.126.63.150 | 1/25/11 | 12/30/99 | log file | No |
| 1.2011011E7 | S020 | 7.0 | 3.0 | Unauthorized connection | 87.245.191.230 | 1/28/11 | 12/30/99 | violation alert | No |
| 1.2011012E7 | S016 | 20.0 | 4.0 | Unauthorized modification | 91.142.195.100 | 1/30/11 | 12/30/99 | user report | Yes |
| 1.2011013E7 | S010 | 14.0 | 5.0 | Probe | 90.151.255.255 | 1/31/11 | 12/30/99 | violation alert | No |
| 2.2011001E7 | S005 | 1.0 | 2.0 | Malicious code | 85.239.63.100 | 2/2/11 | 12/30/99 | user report | Yes |
| 2.2011002E7 | S004 | 4.0 | 3.0 | Unauthorized connection | 86.110.223.150 | 2/3/11 | 12/30/99 | log file | No |
| 2.2011003E7 | S007 | 5.0 | 3.0 | Unauthorized connection | 78.111.165.210 | 2/5/11 | 12/30/99 | log file | No |
| 2.2011004E7 | S011 | 19.0 | 5.0 | Unauthorized access | 217.195.64.100 | 2/7/11 | 12/30/99 | user report | Yes |
| 2.2011005E7 | S005 | 1.0 | 2.0 | Malicious code | 79.104.200.150 | 2/9/11 | 12/30/99 | user report | Yes |
| 2.2011006E7 | S003 | 8.0 | 3.0 | Unauthorized connection | 217.30.128.0 | 2/10/11 | 12/30/99 | log file | No |
| 2.2011007E7 | S001 | 2.0 | 5.0 | Probe | 213.189.224.100 | 2/11/11 | 12/30/99 | violation alert | No |
| 2.2011008E7 | S010 | 14.0 | 1.0 | Denial of service | 79.175.124.100 | 2/13/11 | 12/30/99 | violation alert | Yes |
| 2.2011009E7 | S015 | 17.0 | 4.0 | Unauthorized modification | 212.3.128.0 | 2/16/11 | 12/30/99 | user report | Yes |
| 2.201101E7 | S018 | 13.0 | 3.0 | Unauthorized connection | 217.198.80.0 | 2/18/11 | 12/30/99 | log file | No |
| 2.2011011E7 | S012 | 6.0 | 2.0 | Malicious code | 195.112.96.100 | 2/19/11 | 12/30/99 | user report | Yes |
| 2.2011012E7 | S014 | 16.0 | 3.0 | Unauthorized connection | 78.110.80.180 | 2/21/11 | 12/30/99 | log file | No |
| 2.2011013E7 | S018 | 13.0 | 3.0 | Unauthorized connection | 109.105.64.100 | 2/22/11 | 12/30/99 | log file | No |
| 2.2011014E7 | S004 | 4.0 | 3.0 | Unauthorized connection | 217.150.192.100 | 2/24/11 | 12/30/99 | log file | No |
| 2.2011015E7 | S008 | 9.0 | 3.0 | Unauthorized connection | 78.136.159.250 | 2/25/11 | 12/30/99 | log file | No |
| 2.2011016E7 | S015 | 17.0 | 2.0 | Malicious code | 193.192.18.100 | 2/27/11 | 12/30/99 | user report | Yes |
| 2.2011017E7 | S005 | 1.0 | 3.0 | Unauthorized connection | 62.192.63.235 | 2/28/11 | 12/30/99 | log file | No |
| 3.2011001E7 | S007 | 5.0 | 3.0 | Unauthorized connection | 188.247.32.0 | 3/1/11 | 12/30/99 | log file | No |
| 3.2011002E7 | S012 | 6.0 | 2.0 | Malicious code | 79.143.95.100 | 3/2/11 | 12/30/99 | user report | Yes |
| 3.2011003E7 | S004 | 4.0 | 5.0 | Probe | 188.43.191.255 | 3/3/11 | 12/30/99 | violation alert | No |
| 3.2011004E7 | S003 | 8.0 | 2.0 | Malicious code | 77.232.128.157 | 3/5/11 | 12/30/99 | user report | Yes |
| 3.2011005E7 | S019 | 10.0 | 4.0 | Unauthorized modification | 94.243.63.240 | 3/7/11 | 12/30/99 | user report | Yes |
| 3.2011006E7 | S015 | 17.0 | 3.0 | Unauthorized connection | 217.197.208.0 | 3/8/11 | 12/30/99 | log file | No |
| 3.2011007E7 | S004 | 4.0 | 3.0 | Unauthorized connection | 79.142.160.225 | 3/10/11 | 12/30/99 | log file | No |
| 3.2011008E7 | S008 | 9.0 | 5.0 | Probe | 95.253.127.240 | 3/11/11 | 12/30/99 | violation alert | No |
| 3.2011009E7 | S006 | 3.0 | 3.0 | Unauthorized connection | 77.246.96.0 | 3/15/11 | 12/30/99 | log file | No |
| 3.201101E7 | S003 | 8.0 | 5.0 | Probe | 188.75.240.100 | 3/16/11 | 12/30/99 | violation alert | No |
| 3.2011011E7 | S005 | 1.0 | 2.0 | Malicious code | 78.36.185.155 | 3/19/11 | 12/30/99 | user report | Yes |
| 3.2011012E7 | S009 | 11.0 | 5.0 | Probe | 94.140.63.210 | 3/23/11 | 12/30/99 | violation alert | No |
| 3.2011013E7 | S014 | 16.0 | 4.0 | Unauthorized modification | 62.220.160.110 | 3/24/11 | 12/30/99 | user report | Yes |
| 3.2011014E7 | S016 | 20.0 | 3.0 | Unauthorized connection | 80.243.115.115 | 3/25/11 | 12/30/99 | log file | Yes |
| 3.2011015E7 | S018 | 13.0 | 5.0 | Probe | 94.229.239.255 | 3/27/11 | 12/30/99 | violation alert | No |
| 3.2011016E7 | S013 | 15.0 | 3.0 | Unauthorized connection | 89.109.63.200 | 3/30/11 | 12/30/99 | log file | Yes |
| System_ID | Equipment_ID | TargetHost_IP | Machine_Name | OperatingSystem | Dept_ID | Manufacturer | Model | Serial_No |
| S001 | 8C8HLN1 | 184.154.72.104 | admin.advis.cwcc.edu | windows | D001 | Dell | T410 | 4.25863125E9 |
| S002 | 6M9LKR3 | 184.154.72.105 | python.admin.cwcc.edu | unix | D002 | Dell | T710 | 3.681247308E9 |
| S003 | 6M8MRE3 | 184.154.72.100 | admin.assess.cwcc.edu | windows | D003 | Dell | R910 | 2.389234105E9 |
| S004 | 8D9JKL2 | 184.154.72.109 | adder.bkstr.cwcc.edu | unix | D004 | Dell | R200 | 1.276135681E9 |
| S005 | 9D87NMP1 | 184.154.72.106 | admin.career.cwcc.edu | windows | D005 | Dell | T410 | 4.187347575E9 |
| S006 | 9C7AEC5 | 184.154.72.114 | admin.conted.cwcc.edu | windows | D006 | Dell | 2450 | 1.001458543E9 |
| S007 | 2B4HGW2 | 184.154.72.112 | admin.counsel.cwcc.edu | windows | D007 | Dell | 1900 | 1.083278135E9 |
| S008 | 3M0KIH5 | 184.154.72.118 | cobra.dl.cwcc.edu | unix | D008 | Dell | R610 | 5.231908643E9 |
| S009 | 6D8HAS6 | 184.154.72.107 | apollo.fin.cwcc.edu | unix | D009 | Dell | 2450 | 1.0018712E9 |
| S010 | 8J3THM2 | 184.154.72.102 | admin.honors.cwcc.edu | windows | D010 | Dell | T450 | 4.781207421E9 |
| S011 | 2C9EAP6 | 184.154.72.113 | zeus.hr.cwcc.edu | windows | D011 | Dell | R310 | 3.189346321E9 |
| S012 | 6N7TAK5 | 184.154.72.116 | viper.its.cwcc.edu | unix | D012 | Dell | R415 | 4.347341113E9 |
| S013 | 8A9CFE6 | 184.154.72.117 | admin.intl.cwcc.edu | windows | D013 | Dell | T250 | 1.762390178E9 |
| S014 | 6F3OTG3 | 184.154.72.119 | athena.libr.cwcc.edu | unix | D014 | Dell | R910 | 2.30086145E9 |
| S015 | 8N7GND2 | 184.154.72.103 | admin.acct.cwcc.edu | windows | D015 | Dell | R610 | 5.206218452E9 |
| S016 | 8C8HLB2 | 184.154.72.108 | admin.recruit.cwcc.edu | windows | D016 | Dell | T450 | 4.710814589E9 |
| S017 | 8C2SHM2 | 184.154.72.111 | admin.dis.cwcc.edu | windows | D017 | Dell | R200 | 1.293587621E9 |
| S018 | 8A2LEN1 | 184.154.72.101 | admin.testing.cwcc.edu | windows | D018 | Dell | R400 | 3.587124597E9 |
| S019 | 6M8NOE1 | 184.154.72.110 | artema.transc.cwcc.edu | windows | D019 | Dell | R310 | 3.103518912E9 |
| S020 | 2C9RTS3 | 184.154.72.115 | admin.vet.cwcc.edu | windows | D020 | Dell | R200 | 1.25812498E9 |
SELECT Departments.Dept_Name, Count(Incidents.Incident_ID) AS CountOfIncident_ID
FROM Departments INNER JOIN Incidents ON Departments.Dept_ID=Incidents.Dept_ID
GROUP BY Departments.Dept_Name, Incidents.Compromised
HAVING (((Incidents.Compromised)="Yes"))
ORDER BY Count(Incidents.Incident_ID) DESC;
SELECT Departments.Dept_ID, Departments.Dept_Name, Count(Incidents.Incident_ID) AS CountOfIncident_ID
FROM Departments INNER JOIN Incidents ON Departments.Dept_ID=Incidents.Dept_ID
GROUP BY Departments.Dept_ID, Departments.Dept_Name;