Yes; I'm going through all my old stuff that I never published :) Here's another: http://www.v3rity.com/OracleForensicsInvestigatingPLSQLInjection.pdf
Cheers, David -- //www.freelists.org/webpage/oracle-l