You can probably tell who did it! When you rebase, since the commits are rewritten, the committer information will be from the person doing the rebase, not the original author. (This is separate from the author information.)
You can see this information in gitk
(in the diff pane in the lower left) or in the output of git log --pretty=fuller
(as in more full than full). Example log output:
commit b8624718b97a39a04637c91ec3517c109f3f681d
Author: Original Author <[email protected]>
AuthorDate: Sun Aug 8 02:15:10 2010 -0300
Commit: New Committer <[email protected]>
CommitDate: Mon Jan 23 17:29:39 2012 -0800
a lovely commit message
...
The committer name, email, and date are from the operation that actually wrote the commit. Note that if it's been rewritten multiple times, you'll only have the most recent information.
As for where it was rebased from... if the original version of the rebased commits are also in your history, that's easy. Just search the full history for a matching commit, for example by a fragment of the commit message, or by something that was changed in the commit:
git log --all --grep='commit subject from a rebased commit'
git log --all -S'void this_function_was_added() {'
If you don't have the original commit anywhere in history anymore, that's going to be tougher. Hopefully you'll be able to find out by tracking down the person who did it, and if they don't know, asking them to run git reflog show <branch>
in their repository, to see the history of that branch.