I am looking for a way to track when the DBO account is changed. For example, if someone uses
sp_changedbowner is there a way, after the fact, to determine when this occurred, and even better, what user was used to make the change?
This would be useful in tracking changes in the event of a database breach where teh attacker changed permissions, for example, so I suspect the possibility must be there.
I've been attempting to google it and look for it in the MSDN documentation, but I'm just not finding this.