You have a default server instance for SQL Server, you think that your database files grew last night, and you want to track things down. What do you do?

It’s not in the logs, or metadata, but when listening to the DBA SIG webcast recently from Jonathan Kehayias on the default trace, I learned that these events are captured in the default trace, along with a bunch of other events, like shrinks.

Great for tracking down those rogue administrators that don’t let you know what they’ve done. You can also find out if objects are being created or altered, even after the fact.

There are caveats with some limits placed on the default trace for file sizes and they will rollover, but Jonathan presented a great overview. I’d urge you to check it out (it’s recorded) and also read the article on SQLServerCentral:  Default trace - A Beginner's Guide.