I am using an SQL Server 2012 on windows datacenter 2012
I have encountered a situation where i think some virus/sql injection had heart my database,
Some data on my table had changed to weird link's and it was 100% not coming from my system,
I wish to know what is the best way to track the origin of this change, Is there a way to look in the transactional logs and checek which ip/machine had changed a table ? and what were the changes ?
Maybe is there some software like fiddler\wireshark that can trace the sql queries that are being sent to a server ?