You could run a profiler trace (server side trace) to capture Text Data that contains %xp_cmdshell% and then add the columns you want to see i.e. Host Name, Login, etc.
Microsoft Certified Master - SQL Server 2008 Follow me on twitter: @keith_tate
Forum Etiquette: How to post data/code on a forum to get the best help[/url]