A responder must identify who changed a production network rule. Which source is most directly relevant?

1. Only the latest CPU utilization metric.
2. Only the current rule text.
3. Audit events for the corresponding management operation.
4. The application's public marketing page.