@chad_corbett
The first thing that comes to my mind is the Course Audit Log API.
GET /api/v1/audit/course/courses/:course_id
It doesn't include everything, including most user content changes. I double checked and deletion of files is not included.
However, if you are deleting user content, it may show up the list of deleted material that you get when you add /undelete to the end of the primary course URL. It has a date of when it was created and last updated being the time when it was deleted.
Someone else may know of another way, but the way I can think of to track is to download all the course metadata about assignments, files, discussions, content pages, quizzes, etc., on a regular basis and then look for changes that occur. This is especially true for deletions, because many API calls don't return deleted information (including files). So the presence of a file one day and not the next might mean it was deleted (IDs also change when you replace a file, so be careful).
You may need to dig into the user logs to see who was logged in at a particular time and working on the course to tell who did what.
Similar questions have been asked before, including this one from a month ago: Audit/Track Course Content. The solution there was less technical in nature -- contact support and see what they can do.
Edit: I notice that between the time I started this and the time I finished it, the person who suggested contacting support in the message I linked to posted it here, too.
This discussion post is outdated and has been archived. Please use the Community question forums and official documentation for the most current and accurate information.