Yes. Responding to this and some of the comments below, this has been a standard practice for some time. There was a defcon talk about this years ago. https:/

Yes. Responding to this and some of the comments below, this has been a standard practice for some time. There was a defcon talk about this years ago. https://www.defcon.org/images/defcon-20/dc-20-presentations/Novak-London/DEFCON-20-Novak-London-SQLReInjector.pdf https://www.defcon.org/images/defcon-20/dc-20-presentations/... How do you record what was accessed by a query? Record the results of every query run somewhere? Imagine the resulting data volume explosion you would endure. Instead, you maintain transaction logs or database snapshots so you can approximate database state, and you record the queries that are run. thats a more efficient means, and lets you handle DR, compliance, and investigative needs together.