Access Reports → Events → Password view → Action → View password
In the new screen will be displayed all the credentials that had their passwords withdrawn, including other information such as code, date, operation, user, IP, credential type, device, username, reason, governance ID, and others.