Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
02/22/26 03:30:58 PM msedge WINSTAT-S209 Started PRIMO\matalay 14
02/22/26 03:30:57 PM SDXHelper SILO-231 Ended PRIMO\koo22 7 94
02/22/26 03:30:57 PM cmd WINSTAT-218 Ended PRIMO\zjin287 10 16
02/22/26 03:30:57 PM conhost WINSTAT-218 Ended PRIMO\zjin287 10 31
02/22/26 03:30:57 PM conda WINSTAT-218 Ended PRIMO\zjin287 10 31
02/22/26 03:30:57 PM python WINSTAT-218 Ended PRIMO\zjin287 10 2547
02/22/26 03:30:47 PM cmd WINSTAT-207 Ended PRIMO\lmoustafa 8 125
02/22/26 03:30:47 PM conhost WINSTAT-207 Ended PRIMO\lmoustafa 8 62
02/22/26 03:30:46 PM powershell WINSTAT-207 Ended PRIMO\lmoustafa 8 1547
02/22/26 03:30:45 PM cmd WINSTAT-218 Started PRIMO\zjin287 10
02/22/26 03:30:45 PM conhost WINSTAT-218 Started PRIMO\zjin287 10
02/22/26 03:30:45 PM conda WINSTAT-218 Started PRIMO\zjin287 10
02/22/26 03:30:45 PM python WINSTAT-218 Started PRIMO\zjin287 10
02/22/26 03:30:44 PM powershell WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:43 PM powershell WINSTAT-207 Ended PRIMO\lmoustafa 8 688
02/22/26 03:30:43 PM quser WINSTAT-207 Ended PRIMO\lmoustafa 8 31
02/22/26 03:30:43 PM quser WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:43 PM powershell WINSTAT-207 Ended PRIMO\lmoustafa 8 703
02/22/26 03:30:43 PM powershell WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:42 PM powershell WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:42 PM wscript WINSTAT-207 Ended PRIMO\lmoustafa 8 109
02/22/26 03:30:42 PM conhost WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:41 PM cmd WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:41 PM smartscreen SILO-226 Ended PRIMO\vasquezramos 10 78
02/22/26 03:30:41 PM LogonUI WINSTAT-207 Ended NT AUTHORITY\system 8 672
02/22/26 03:30:41 PM wscript WINSTAT-207 Started PRIMO\lmoustafa 8
02/22/26 03:30:41 PM 10.130.242.97 WINSTAT-207 SessionUnlock PRIMO\lmoustafa 8
02/22/26 03:30:38 PM SDXHelper SILO-231 Ended PRIMO\koo22 7 141
02/22/26 03:30:35 PM SDXHelper SILO-231 Started PRIMO\koo22 7
02/22/26 03:30:35 PM SDXHelper SILO-231 Started PRIMO\koo22 7
02/22/26 03:30:33 PM conhost WINSTAT-218 Ended PRIMO\broscious 14 16
02/22/26 03:30:33 PM cmd WINSTAT-218 Ended PRIMO\broscious 14 31
02/22/26 03:30:33 PM conda WINSTAT-218 Ended PRIMO\broscious 14 16
02/22/26 03:30:32 PM python WINSTAT-218 Ended PRIMO\broscious 14 2141
02/22/26 03:30:32 PM python WINSTAT-218 Ended PRIMO\broscious 14 1875
02/22/26 03:30:32 PM cmd WINSTAT-212 Ended PRIMO\jkroah 8 62
02/22/26 03:30:32 PM python WINSTAT-212 Ended PRIMO\jkroah 8 4562
02/22/26 03:30:32 PM conda WINSTAT-212 Ended PRIMO\jkroah 8 31
02/22/26 03:30:32 PM conhost WINSTAT-212 Ended PRIMO\jkroah 8 31
02/22/26 03:30:32 PM python WINSTAT-212 Ended PRIMO\jkroah 8 3703
02/22/26 03:30:28 PM TSTheme SILO-231 Ended PRIMO\llanes 13
02/22/26 03:30:27 PM python WINSTAT-218 Started PRIMO\broscious 14
02/22/26 03:30:26 PM conhost SILO-231 Ended PRIMO\llanes 13 31
02/22/26 03:30:26 PM Bginfo64 SILO-231 Ended PRIMO\llanes 13 125
02/22/26 03:30:26 PM cmd SILO-231 Ended PRIMO\llanes 13 62
02/22/26 03:30:25 PM powershell SILO-231 Ended PRIMO\llanes 13 688
02/22/26 03:30:25 PM Bginfo64 SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:25 PM EXCEL WINSTAT-221 Ended PRIMO\eteramoto 8 359
02/22/26 03:30:24 PM conda WINSTAT-209 Ended PRIMO\ji53 5 62
02/22/26 03:30:24 PM python WINSTAT-209 Ended PRIMO\ji53 5 2562
02/22/26 03:30:24 PM conhost WINSTAT-209 Ended PRIMO\ji53 5 62
02/22/26 03:30:24 PM cmd WINSTAT-209 Ended PRIMO\ji53 5 16
02/22/26 03:30:24 PM python WINSTAT-209 Ended PRIMO\ji53 5 1531
02/22/26 03:30:23 PM python WINSTAT-212 Started PRIMO\jkroah 8
02/22/26 03:30:23 PM powershell SILO-231 Ended PRIMO\llanes 13 375
02/22/26 03:30:23 PM powershell SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:23 PM powershell SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:22 PM TabTip SILO-231 Ended NT AUTHORITY\system 13 172
02/22/26 03:30:22 PM LogonUI SILO-231 Ended NT AUTHORITY\system 13 172
02/22/26 03:30:22 PM conhost SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:22 PM LogonUI SILO-231 Ended NT AUTHORITY\system 15 375
02/22/26 03:30:22 PM dwm SILO-231 Ended WINDOW MANAGER\dw... 15 62
02/22/26 03:30:22 PM winlogon SILO-231 Ended NT AUTHORITY\system 15 125
02/22/26 03:30:22 PM CtxGfx SILO-231 Ended NT AUTHORITY\system 15 141
02/22/26 03:30:22 PM fontdrvhost SILO-231 Ended FONT DRIVER HOST\... 15 16
02/22/26 03:30:22 PM EXCEL WINSTAT-221 Started PRIMO\eteramoto 8
02/22/26 03:30:22 PM python WINSTAT-209 Started PRIMO\ji53 5
02/22/26 03:30:22 PM cmd SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:22 PM 172.25.0.64 SILO-231 SessionUnlock PRIMO\llanes 13
02/22/26 03:30:22 PM 172.25.0.64 SILO-231 RemoteConnect PRIMO\llanes 13
02/22/26 03:30:22 PM TSTheme SILO-231 Started PRIMO\llanes 13
02/22/26 03:30:22 PM SILO-231 RemoteDisconnect 15
02/22/26 03:30:21 PM python WINSTAT-218 Started PRIMO\broscious 14
02/22/26 03:30:21 PM conhost WINSTAT-218 Started PRIMO\broscious 14
02/22/26 03:30:21 PM cmd WINSTAT-218 Started PRIMO\broscious 14
607 million total events