Abstract: A method, system and computer readable code for instrumenting code into database access modules are disclosed. According to some embodiments, specific functions within the database access module are identified as query-execution functions, and instructions for logging at least one of database access strings and database connection string during runtime are instrumented into the identified query-execution functions. Exemplary database access strings include database query strings, such as an SQL query string, and stored procedure names. Optionally, additional instructions for extracting various parameters, such as database identifiers, performance parameters, and security policy parameters, from the database connection strings are instrumented. According to some embodiments, the identifying of query-execution functions includes determining if an identity of a candidate function of a database access module matches one of the identifiers of a known execution function.