Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
02/20/26 10:53:05 AM runonce SILORD-004 Ended PRIMO\wcarpenter2 20 109
02/20/26 10:53:05 AM mobsync SILORD-004 Ended PRIMO\wcarpenter2 20 31
02/20/26 10:53:05 AM scrnsave.scr WINSTAT-224 Started PRIMO\asjadhav2 4
02/20/26 10:53:03 AM csc_ui SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:53:03 AM runonce SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:53:02 AM SecurityHealthSystray SILORD-004 Ended PRIMO\wcarpenter2 20
02/20/26 10:53:02 AM Citrix.Authentication.VirtualSmartcard.Launcher SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:53:02 AM smartscreen SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:53:02 AM SecurityHealthSystray SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:58 AM Citrix.Authentication.VirtualSmartcard.Launcher SILORD-004 Ended PRIMO\wcarpenter2 20 31
02/20/26 10:52:57 AM RuntimeBroker SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:57 AM SCNotification SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:55 AM mobsync SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:53 AM cmd SILORD-004 Ended PRIMO\wcarpenter2 20 172
02/20/26 10:52:53 AM Bginfo64 SILORD-004 Ended PRIMO\wcarpenter2 20 172
02/20/26 10:52:53 AM conhost SILORD-004 Ended PRIMO\wcarpenter2 20 125
02/20/26 10:52:53 AM cmd WINSTAT-222 Ended PRIMO\karamese 7 62
02/20/26 10:52:53 AM conhost WINSTAT-222 Ended PRIMO\karamese 7 78
02/20/26 10:52:53 AM Bginfo64 WINSTAT-222 Ended PRIMO\karamese 7 141
02/20/26 10:52:52 AM Bginfo64 SILORD-004 Ended PRIMO\wcarpenter2 20 156
02/20/26 10:52:52 AM conhost SILORD-004 Ended PRIMO\wcarpenter2 20 141
02/20/26 10:52:52 AM cmd SILORD-004 Ended PRIMO\wcarpenter2 20 172
02/20/26 10:52:52 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 1016
02/20/26 10:52:52 AM Bginfo64 SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:52 AM QtWebEngineProcess WINSTAT-S235 Started PRIMO\kchao5 12
02/20/26 10:52:52 AM Bginfo64 SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:52 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 906
02/20/26 10:52:52 AM backgroundTaskHost SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:52 AM Bginfo64 WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:51 AM RuntimeBroker SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:51 AM powershell WINSTAT-222 Ended PRIMO\karamese 7 750
02/20/26 10:52:51 AM RuntimeBroker SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:51 AM ShellExperienceHost SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:51 AM SearchUI SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:50 AM OfficeClickToRun SILORD-003 Started PRIMO\pdferguson 3
02/20/26 10:52:50 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 391
02/20/26 10:52:50 AM powershell SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:50 AM powershell WINSTAT-222 Ended PRIMO\karamese 7 312
02/20/26 10:52:50 AM powershell WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:50 AM TSTheme SILORD-004 Ended PRIMO\wcarpenter2 20 31
02/20/26 10:52:49 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 406
02/20/26 10:52:49 AM powershell SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:49 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 516
02/20/26 10:52:49 AM quser SILORD-004 Ended PRIMO\wcarpenter2 20 94
02/20/26 10:52:49 AM powershell SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:49 AM rundll32 SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:49 AM SDXHelper WINSTAT-224 Ended PRIMO\noghanibeham 5 125
02/20/26 10:52:49 AM powershell WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:49 AM quser SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:49 AM powershell SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM taskhostw SILORD-004 Ended PRIMO\wcarpenter2 20 125
02/20/26 10:52:48 AM conhost SILORD-004 Ended PRIMO\wcarpenter2 20 62
02/20/26 10:52:48 AM cmstart SILORD-004 Ended PRIMO\wcarpenter2 20 31
02/20/26 10:52:48 AM wscript SILORD-004 Ended PRIMO\wcarpenter2 20 156
02/20/26 10:52:48 AM taskhostw SILORD-004 Ended PRIMO\krvoskuil 19 94
02/20/26 10:52:48 AM taskhostw SILORD-004 Ended PRIMO\dkahn3 18 94
02/20/26 10:52:48 AM wscript SILORD-004 Ended PRIMO\wcarpenter2 20 188
02/20/26 10:52:48 AM powershell SILORD-004 Ended PRIMO\wcarpenter2 20 562
02/20/26 10:52:48 AM CtxMtHost SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM cmd SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM explorer SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM powershell SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM conhost SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM conhost SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM cmd SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM Citrix.Authentication.VirtualSmartcard.Launcher SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM wscript WINSTAT-222 Ended PRIMO\karamese 7 78
02/20/26 10:52:48 AM cmd WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:48 AM conhost WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:48 AM LogonUI WINSTAT-222 Ended NT AUTHORITY\system 7 375
02/20/26 10:52:48 AM wscript WINSTAT-222 Started PRIMO\karamese 7
02/20/26 10:52:48 AM 10.131.101.234 WINSTAT-222 SessionUnlock PRIMO\karamese 7
02/20/26 10:52:48 AM taskhostw SILORD-004 Started PRIMO\wcarpenter2 20
02/20/26 10:52:48 AM taskhostw SILORD-004 Started PRIMO\krvoskuil 19
02/20/26 10:52:48 AM taskhostw SILORD-004 Started PRIMO\dkahn3 18
606 million total events