Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
03/11/26 05:02:13 AM python SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:13 AM conda SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:12 AM conhost SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:12 AM powershell SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:12 AM sihost SILO-226 Ended PRIMO\wshan23 25 578
03/11/26 05:02:12 AM taskhostw SILO-226 Ended PRIMO\wshan23 25 31
03/11/26 05:02:12 AM ShellExperienceHost SILO-226 Ended PRIMO\wshan23 25 516
03/11/26 05:02:12 AM SearchUI SILO-226 Ended PRIMO\wshan23 25 1469
03/11/26 05:02:12 AM ctfmon SILO-226 Ended PRIMO\wshan23 25 172
03/11/26 05:02:12 AM explorer SILO-226 Ended PRIMO\wshan23 25 9141
03/11/26 05:02:12 AM RuntimeBroker SILO-226 Ended PRIMO\wshan23 25 3500
03/11/26 05:02:12 AM WfShell SILO-226 Ended PRIMO\wshan23 25 266
03/11/26 05:02:12 AM gpscript SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:11 AM python WINSTAT-209 Started PRIMO\zjin287 13
03/11/26 05:02:10 AM smartscreen SILO-226 Ended PRIMO\wshan23 25 47
03/11/26 05:02:10 AM CtxGfx SILO-226 Ended PRIMO\wshan23 25 219
03/11/26 05:02:10 AM CtxMtHost SILO-226 Ended PRIMO\wshan23 25 16
03/11/26 05:02:10 AM icak2meng SILO-226 Ended NT AUTHORITY\system 25 16
03/11/26 05:02:10 AM SCNotification SILO-226 Ended PRIMO\wshan23 25 359
03/11/26 05:02:10 AM VdaRedirector SILO-226 Ended PRIMO\wshan23 25 47
03/11/26 05:02:10 AM powershell SILO-226 Ended PRIMO\wshan23 25 344
03/11/26 05:02:10 AM conhost SILO-226 Ended PRIMO\wshan23 25 172
03/11/26 05:02:10 AM LogonUI SILO-226 Started NT AUTHORITY\system 25
03/11/26 05:02:09 AM conhost WINSTAT-212 Started PRIMO\jkroah 8
03/11/26 05:02:09 AM conda WINSTAT-212 Started PRIMO\jkroah 8
03/11/26 05:02:09 AM python WINSTAT-212 Started PRIMO\jkroah 8
03/11/26 05:02:09 AM python SILO-226 Ended PRIMO\wshan23 25 2875
03/11/26 05:02:09 AM conda SILO-226 Ended PRIMO\wshan23 25 16
03/11/26 05:02:09 AM python WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:02:08 AM conhost WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:02:08 AM conda WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:02:08 AM cmd WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:02:02 AM python SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:02 AM conda SILO-226 Ended PRIMO\wshan23 25
03/11/26 05:02:02 AM python SILO-226 Ended PRIMO\wshan23 25 1672
03/11/26 05:02:02 AM conda SILO-226 Started PRIMO\wshan23 25
03/11/26 05:02:01 AM conda WINSTAT-209 Started PRIMO\zjin287 13
03/11/26 05:02:01 AM python WINSTAT-209 Started PRIMO\zjin287 13
03/11/26 05:02:01 AM conhost WINSTAT-209 Started PRIMO\zjin287 13
03/11/26 05:02:01 AM cmd WINSTAT-209 Started PRIMO\zjin287 13
03/11/26 05:01:56 AM ai SILO-226 Ended PRIMO\wshan23 25 203
03/11/26 05:01:56 AM python SILO-226 Started PRIMO\wshan23 25
03/11/26 05:01:56 AM conda SILO-226 Started PRIMO\wshan23 25
03/11/26 05:01:55 AM WINWORD SILO-226 Ended PRIMO\wshan23 25 17594
03/11/26 05:01:55 AM conhost SILO-226 Started PRIMO\wshan23 25
03/11/26 05:01:55 AM powershell SILO-226 Started PRIMO\wshan23 25
03/11/26 05:01:51 AM conda WINSTAT-201 Ended PRIMO\sguo88 6 62
03/11/26 05:01:51 AM python WINSTAT-201 Ended PRIMO\sguo88 6 5312
03/11/26 05:01:51 AM conhost WINSTAT-201 Ended PRIMO\sguo88 6 47
03/11/26 05:01:51 AM cmd WINSTAT-201 Ended PRIMO\sguo88 6 47
03/11/26 05:01:51 AM python WINSTAT-201 Ended PRIMO\sguo88 6 2984
03/11/26 05:01:42 AM python WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:01:37 AM firefox WINSTAT-212 Ended PRIMO\ndao3 6 219
03/11/26 05:01:37 AM conhost SILO-232 Ended PRIMO\jluo73 25 47
03/11/26 05:01:37 AM tasklist SILO-232 Ended PRIMO\jluo73 25 47
03/11/26 05:01:36 AM conhost SILO-232 Ended PRIMO\jluo73 25 31
03/11/26 05:01:36 AM tasklist SILO-232 Ended PRIMO\jluo73 25 47
03/11/26 05:01:36 AM conhost SILO-232 Started PRIMO\jluo73 25
03/11/26 05:01:36 AM tasklist SILO-232 Started PRIMO\jluo73 25
03/11/26 05:01:36 AM conhost SILO-232 Started PRIMO\jluo73 25
03/11/26 05:01:36 AM tasklist SILO-232 Started PRIMO\jluo73 25
03/11/26 05:01:34 AM conhost WINSTAT-218 Ended PRIMO\broscious 14 47
03/11/26 05:01:34 AM python WINSTAT-218 Ended PRIMO\broscious 14 31
03/11/26 05:01:34 AM conhost WINSTAT-218 Ended PRIMO\broscious 14
03/11/26 05:01:34 AM cmd WINSTAT-218 Ended PRIMO\broscious 14 31
03/11/26 05:01:34 AM conhost WINSTAT-218 Started PRIMO\broscious 14
03/11/26 05:01:34 AM python WINSTAT-218 Started PRIMO\broscious 14
03/11/26 05:01:33 AM python WINSTAT-218 Ended PRIMO\broscious 14 2047
03/11/26 05:01:33 AM conda WINSTAT-218 Ended PRIMO\broscious 14 16
03/11/26 05:01:33 AM python WINSTAT-218 Ended PRIMO\broscious 14 1922
03/11/26 05:01:32 AM conda WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:01:32 AM python WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:01:32 AM conhost WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:01:32 AM cmd WINSTAT-201 Started PRIMO\sguo88 6
03/11/26 05:01:28 AM conda WINSTAT-201 Ended PRIMO\sguo88 6 62
612 million total events