Somebody dropped one application user. That user is a owner of some application tables. Anybody have idea! How to find out? I mean can we know who dropped that user?

I am going to do point-in-time recovery,

I copied all the backup-files from yesterday,

I am keeping the current control file,current redo-log files.

any steps please