question

Your best bet it is to use audits to capture DML statements. Keep in mind however, that sysadmins can turn them off essentially circumventing the auditing. Reference: https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-database-engine You could put the audit files onto a share that SQL Server has permissions to but the sysadmins do not. Hope that helps!