In my current work location we have a MOSS 2007 intranet environment with more than 10 site collections, but in one of the site collections few sub-sites were deleted on the same day. We have analysed the IIS logs to find out who deleted the site but there were no deleteweb.aspx or webdeleted.aspx entries for those sites.
In addition to that Audit logging was not enabled in the SP application when sub sites were deleted and few users on one of the sub-sites used SP designer where the entries for author.dll could be seen in the IIS logs, but none of the users claimed the site deletion.
We are trying every possible way to figure out how sub sites were deleted, but no luck. Since the sub sites are on production server with business critical data in it, we cant afford the same thing happening again.
So could you suggest me any possible way to find how the sites were deleted?