How to find who pushed patches to all servers

Hello All,

In my company helpdesk team(More than 10 guys) used altiris to push patches to servers and workstations as per the schedule. Suddenly today all the servers and workstations are showing pending for reboot. Based on my findings somene pushed last year patch policy (November Month). I need to find who exactly did this? Please help me to find the logs.

Regards,

Mac