1. A method for reconstructing a sequence of queries that occurred during a period of database activity monitor unavailability, the method comprising: receiving, by one or more computer processors, a first sequence of queries; determining, by one or more computer processors, whether the database activity monitor became unavailable; receiving, by one or more computer processors, a second sequence of queries; determining, by one or more computer processors, a probable sequence of queries that occurred in a period of time during which the database activity monitor was unavailable to validate queries, wherein the probable sequence of queries fit temporally subsequent to the first sequence of queries and prior to the second sequence of queries; and validating, by one or more computer processors, the probable sequence of queries with reference to a set of security policies.