InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comTue, 21 May 2013 11:53:30 GMT20http://www.sqlservercentral.com/Forums/Topic1366347-1526-1.aspxCan you give an example of code not looking genuine? SELECT queries and execution of stored procedures would be hard to manipulate in this way as they don't fire DML triggers. You might be able to do something with extended events or via the results of traces, but if you use a trace, there's always going to be a lag.Wed, 03 Oct 2012 06:27:04 GMTK. Brian Kelleyhttp://www.sqlservercentral.com/Forums/Topic1366347-1526-1.aspxHi Folks,Wondering if anyone had any ideas on this dilema?I want to be able to trace code through my database, looking for certain patterns of sql code.If the code being run, does not look genuine, i want to be able to lock the account that is sending it.I am considering looking at the dmv's and pulling out the running queries and then locking the account, and send an alert.Are there better ways of doing this?Thanks. Mon, 01 Oct 2012 01:40:19 GMTgoodhereinit