You may want to take a lok at
Log Explorer for SQL Server from
http://www.lumigent.com/products/le_sql/le_sql.htm which allows to anylize transaction logs and even recover data using them
>Hey all,
>
>The most dreaded thing happened today...75% of an important table went missing. No idea how, no idea on even where code could be that could do such a thing.
>
>Is there a log or file somewhere that lists the commands as seen by SQL Server? I understand that would be a large haystack, but I need to look for a needle somewhere. I think we will get a backup file OK, but I need to know how this happened.
>
>Any troubleshooting ideas? I have already searched the code for all DELETE FROM keywords, and there are none without a proper WHERE clause. Even so, whatever command ran did not nuke the whole table. It left all the records for our other office, which meant something went wrong with the maintenance screen here in our office. That screen uses an updateable cursor that at most does a DELETE one record at a time. I have no idea how thousands of records could have been deleted via that interface.
>
>
--sb--