Which smear view tracker selection would most effectively show who installed a security policy block

Which smear view tracker selection would most effectively show who installed a security policy blocking all traffic from the corporate network?

A.
Custom filter

B.
Network and Endpoint tab

C.
Management Tab

D.
Active tab