Auduting Sqlplus/Sql Developer sessions

Hi All,

I am hoping someone can help or provide guidance.

We are on 11.2.0.4 Standard Edition and want to put something in place to capture Insert/Update/Delete requests from SQLPLUS/SqlDeveloper.

I would also like to capture package/trigger changes too but not sure this is possible (certainly not found anything useful yet).

I was initially looking to use Auditing, but I am not sure we can enable auditing for SQLPLUS/SqlDeveloper sessions only, plus for specific users.

A LOGON system trigger maybe another option and using something like this:

select program

        from v$session

        where

                sys_context('USERENV','SESSIONID') = audsid