1. A method for reconstructing a sequence of queries that occurred during a period of database activity monitor unavailability, the method comprising: receiving, by one or more computer processors, a first sequence of queries; determining, by one or more computer processors, whether the database activity monitor became unavailable; receiving, by one or more computer processors, a second sequence of queries; determining, by one or more computer processors, a probable sequence of queries, wherein the probable sequence of queries fit temporally subsequent to the first sequence of queries and prior to the second sequence of queries; and validating, by one or more computer processors, the probable sequence of queries with reference to a set of security policies.