open the "Search & Reporting" application, and find through SPL searches against all data the password utilized during the PsExec activity