Start there-work out (or down)
No approval? Work down, one level at a time. Pull computer logs, phone calls, private email accounts, etc. Monitor all current communications. Revoke clearances. And so on & so on & so on until the perp is identified.
Name the investigation for what it is-a National Security Breach .
Adding to my earlier post-President Trump should make it clear the investigation into this breach of National Security will be led by the facts as they unfold and the facts will be followed wherever they lead. No one in any administration, past or present is above the law.