Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights.
The application works with remote MS-SQL server which I don't control, it also seems that the application in question uses integrated security to protect its traffic during transmission. I don't have knowledge on its inner workings (but it's possible to decompile it, it seems, with tools like ILspy), and I don't have any access to network equipment either.
How can I monitor SQL queries it issues? I presume that wireshark won't show anything as traffic will be encrypted. Is it possible to MiM TDS protocol's connection protected with integrated security in such way, that I will be able to see raw TDS stream? Or may be there are some monitoring tools able to hook into windows's protocol stack just beneath the application OSI's layer, like, before it becomes encrypted for transimition?