You can pull the plan generated out of cache using dynamic management views such as sys.dm_exec_query_stats combined with sys.dm_exec_query_plan. You can also use extended events to capture either estimated or actual plans, but be very cautious about this. Capturing execution plans puts quite a load on the system. Be sure that you put filtering in place to only capture a small subset of the events.