Database activity monitoring records and analyses relevant actions against a database, especially access to sensitive data, privileged activity, and material changes. Its value is not simply collecting logs. It is providing evidence that supports timely investigation, accountability, and corrective action.