Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
02/27/26 10:55:36 AM python WINSTAT-218 Started PRIMO\broscious 14
02/27/26 10:55:36 AM conhost WINSTAT-218 Started PRIMO\broscious 14
02/27/26 10:55:36 AM conda WINSTAT-218 Started PRIMO\broscious 14
02/27/26 10:55:36 AM cmd WINSTAT-218 Started PRIMO\broscious 14
02/27/26 10:55:35 AM smartscreen SILO-232 Ended PRIMO\cychu 18 62
02/27/26 10:55:32 AM Robocopy SILORD-003 Ended PRIMO\geralt 7
02/27/26 10:55:32 AM Robocopy SILORD-003 Started PRIMO\geralt 7
02/27/26 10:55:29 AM conhost SILORD-003 Started PRIMO\geralt 7
02/27/26 10:55:28 AM cmd SILORD-003 Started PRIMO\geralt 7
02/27/26 10:55:24 AM wordpad SILORD-004 Ended PRIMO\krvoskuil 4 1359
02/27/26 10:55:23 AM fontdrvhost WINSTAT-S208 Ended FONT DRIVER HOST\... 12 62
02/27/26 10:55:23 AM winlogon WINSTAT-S208 Ended NT AUTHORITY\system 12 312
02/27/26 10:55:23 AM dwm WINSTAT-S208 Ended WINDOW MANAGER\dw... 12 1922
02/27/26 10:55:23 AM LogonUI WINSTAT-S208 Ended NT AUTHORITY\system 12 78
02/27/26 10:55:22 AM python WINSTAT-209 Ended PRIMO\zjin287 13 62
02/27/26 10:55:22 AM conhost WINSTAT-209 Ended PRIMO\zjin287 13 31
02/27/26 10:55:22 AM cmd WINSTAT-209 Ended PRIMO\zjin287 13 47
02/27/26 10:55:22 AM python WINSTAT-209 Ended PRIMO\zjin287 13 4312
02/27/26 10:55:22 AM python WINSTAT-209 Ended PRIMO\zjin287 13 3000
02/27/26 10:55:22 AM conda WINSTAT-209 Ended PRIMO\zjin287 13 62
02/27/26 10:55:22 AM python WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:55:21 AM msedgewebview2 WINSTAT-201 Ended PRIMO\rrtravis 4 125
02/27/26 10:55:21 AM msedgewebview2 WINSTAT-201 Started PRIMO\rrtravis 4
02/27/26 10:55:20 AM AcroCEF WINSTAT-201 Ended PRIMO\rrtravis 4 125
02/27/26 10:55:19 AM AcroCEF WINSTAT-201 Started PRIMO\rrtravis 4
02/27/26 10:55:13 AM msedge WINSTAT-S237 Ended PRIMO\speng73 19 125
02/27/26 10:55:13 AM msedge WINSTAT-S237 Started PRIMO\speng73 19
02/27/26 10:55:12 AM python WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:55:11 AM msedge WINSTAT-201 Ended PRIMO\zli2546 3 62
02/27/26 10:55:11 AM backgroundTaskHost WINSTAT-222 Ended PRIMO\jldykema 3 78
02/27/26 10:55:11 AM msedge WINSTAT-201 Started PRIMO\zli2546 3
02/27/26 10:55:11 AM backgroundTaskHost WINSTAT-222 Started PRIMO\jldykema 3
02/27/26 10:55:11 AM RuntimeBroker WINSTAT-222 Started PRIMO\jldykema 3
02/27/26 10:55:09 AM python WINSTAT-201 Ended PRIMO\sguo88 6 31
02/27/26 10:55:09 AM conda WINSTAT-201 Ended PRIMO\sguo88 6 31
02/27/26 10:55:09 AM conhost WINSTAT-201 Ended PRIMO\sguo88 6 31
02/27/26 10:55:09 AM cmd WINSTAT-201 Ended PRIMO\sguo88 6 62
02/27/26 10:55:09 AM python WINSTAT-201 Started PRIMO\sguo88 6
02/27/26 10:55:08 AM python WINSTAT-201 Ended PRIMO\sguo88 6 2531
02/27/26 10:55:08 AM python WINSTAT-201 Ended PRIMO\sguo88 6 3406
02/27/26 10:55:07 AM StataSE-64 WINSTAT-205 Started PRIMO\pilarz 17
02/27/26 10:55:05 AM RuntimeBroker WINSTAT-220 Ended PRIMO\rochagregg 7 31
02/27/26 10:55:02 AM python WINSTAT-212 Ended PRIMO\jkroah 8 31
02/27/26 10:55:02 AM conda WINSTAT-212 Ended PRIMO\jkroah 8 47
02/27/26 10:55:02 AM conhost WINSTAT-212 Ended PRIMO\jkroah 8 62
02/27/26 10:55:02 AM cmd WINSTAT-212 Ended PRIMO\jkroah 8 47
02/27/26 10:55:02 AM python WINSTAT-212 Ended PRIMO\jkroah 8 4359
02/27/26 10:55:02 AM python WINSTAT-212 Ended PRIMO\jkroah 8 3453
02/27/26 10:55:02 AM python WINSTAT-212 Started PRIMO\jkroah 8
02/27/26 10:55:02 AM python WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:55:01 AM conhost WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:55:01 AM cmd WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:55:01 AM conda WINSTAT-209 Started PRIMO\zjin287 13
02/27/26 10:54:59 AM python WINSTAT-201 Started PRIMO\sguo88 6
02/27/26 10:54:53 AM python WINSTAT-212 Started PRIMO\jkroah 8
02/27/26 10:54:52 AM csc WINSTAT-S208 Ended PRIMO\msauval 12 141
02/27/26 10:54:52 AM RuntimeBroker WINSTAT-S208 Ended PRIMO\msauval 12 359
02/27/26 10:54:52 AM gpscript WINSTAT-S208 Ended PRIMO\msauval 12 16
02/27/26 10:54:52 AM RuntimeBroker WINSTAT-S208 Ended PRIMO\msauval 12 344
02/27/26 10:54:52 AM cvtres WINSTAT-S208 Ended PRIMO\msauval 12 78
02/27/26 10:54:52 AM powershell WINSTAT-S208 Ended PRIMO\msauval 12 547
02/27/26 10:54:52 AM svchost WINSTAT-S208 Ended PRIMO\msauval 12 156
02/27/26 10:54:52 AM svchost WINSTAT-S208 Ended PRIMO\msauval 12 188
02/27/26 10:54:52 AM conhost WINSTAT-S208 Ended PRIMO\msauval 12 109
02/27/26 10:54:52 AM WINSTAT-S208 SessionLogoff 12
02/27/26 10:54:52 AM csc WINSTAT-S208 Started PRIMO\msauval 12
02/27/26 10:54:52 AM cvtres WINSTAT-S208 Started PRIMO\msauval 12
02/27/26 10:54:51 AM conhost WINSTAT-S208 Started PRIMO\msauval 12
02/27/26 10:54:51 AM taskhostw WINSTAT-S208 Ended PRIMO\msauval 12 125
02/27/26 10:54:51 AM gpscript WINSTAT-S208 Started PRIMO\msauval 12
02/27/26 10:54:51 AM powershell WINSTAT-S208 Started PRIMO\msauval 12
02/27/26 10:54:50 AM RuntimeBroker WINSTAT-S208 Ended PRIMO\msauval 12 828
02/27/26 10:54:50 AM ShellExperienceHost WINSTAT-S208 Ended PRIMO\msauval 12 609
02/27/26 10:54:50 AM WfShell WINSTAT-S208 Ended PRIMO\msauval 12 266
02/27/26 10:54:50 AM SearchUI WINSTAT-S208 Ended PRIMO\msauval 12 2375
608 million total events