Database Activity Monitoring DAM

A system that monitors and records every query made to your databases (especially by privileged users), detects suspicious bulk data extraction, and blocks it when needed.

When you need it

• BDDK (Turkish banking regulator), PCI DSS or healthcare regulations require database access logs
• You can't see what database administrators (DBAs) and application accounts are doing
• An insider pulling customer data in bulk is your biggest risk

When you do not need it

• With a few databases, turning on built-in audit features and sending the logs to your SIEM is enough to start.
• If your database is a managed cloud service, start with the provider's built-in audit tools.

Via agents on database servers or over the network; logs are kept in a separate system DBAs cannot modify.