Deploying software and updates using Configuration Manager
That's a difficult thing to track down..
I Believe the info is in the SCNotify_... log.
I've found it nearly impossible to track. You'd probably have had to set your log sizes higher and keep additional rollover logs to catch the popups.
Sorry, can't give you details, been awhile since I looked, I just remember it was annoying and not exactly obvious.