1. A method of intercepting encrypted data in transit comprising: locating a database access process; the database access process operable as an endpoint of an encrypted sequence of data in transit; identifying, in the database access process, a transfer of processing control to a cryptographic operation, the cryptographic operation operable to generate decrypted data from the encrypted sequence of data; replacing the transfer of processing control to the cryptographic operation with an interception to extract the decrypted data; intercepting the decrypted data for analysis by a database monitor; and returning processing control from the interception to the database access process along with unhindered decrypted data returned from the cryptographic operation.