Found an area of SAP which provided the times and dates that credit memos were altered. I can't figure out how to get back to that place. Need it for theft documentation. Help!

I can view the change logs and the change "instances", but I can't get back to the portion of SAP that broke it down into the actual TIME that each change for the credit memos took place.  I need this information for a theft/embezzlement case to show that an employee doctored credit memos.  Time is of the essence.  Feel free to answer through this discussion space or call me at 719-623-9251.

Sharon