could check the default trace, depending on how active the server is

other than that if you dont do custom auditing your out of luck