Should do, but it'll depend on exactly how the query is sent.

Usually I see stuff like this
(@P1 int) @P1 = 27; SELECT Stuff FROM Table WHERE Column...

Capture the event rpc_completed.

Batch completed is for ad-hoc batches, like what you run from Management Studio. It won't catch remote procedure calls, which is how applications send parameterised...

Database level permissions cannot be granted to a server role.
Server roles get the server-level permissions (VIEW SERVER STATE, ALTER ANY LOGIN, etc)
Database roles get database level permissions (SELECT,...

That's not the system view sys.objects. Whatever that it, it's in the dbo schema and it's a user table. So, no idea, it's something of yours.Check with your developers, see...

btw, I see 176 permissions granted to Public in a new SQL 2017 database. Not >2000. Could be that someone's granted extra permissions to public in your DB?

Most likely the problem is in the asp.net app that's being used to transfer the data. If it's doing it a row at a time, it will be slow and...

From that page:

Permissions

The visibility of the metadata in catalog views is limited to securables that a user either owns or on which...

If you did not have something monitoring what was running at that time, then you will no be able to tell what was running at the time.