Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
03/28/26 07:44:40 PM python WINSTAT-221 Started PRIMO\zjin287 2
03/28/26 07:44:39 PM TSTheme WINSTAT-219 Ended PRIMO\szheng244 5 31
03/28/26 07:44:39 PM conda WINSTAT-218 Started PRIMO\sguo88 7
03/28/26 07:44:39 PM python WINSTAT-218 Started PRIMO\sguo88 7
03/28/26 07:44:39 PM cmd WINSTAT-218 Started PRIMO\sguo88 7
03/28/26 07:44:39 PM conhost WINSTAT-218 Started PRIMO\sguo88 7
03/28/26 07:44:38 PM powershell WINSTAT-219 Started PRIMO\szheng244 5
03/28/26 07:44:37 PM wscript WINSTAT-219 Ended PRIMO\szheng244 5 125
03/28/26 07:44:37 PM conhost WINSTAT-219 Started PRIMO\szheng244 5
03/28/26 07:44:37 PM python WINSTAT-224 Started PRIMO\broscious 5
03/28/26 07:44:36 PM cmd WINSTAT-219 Started PRIMO\szheng244 5
03/28/26 07:44:35 PM cmd WINSTAT-220 Started PRIMO\ji53 15
03/28/26 07:44:35 PM conda WINSTAT-220 Started PRIMO\ji53 15
03/28/26 07:44:35 PM conhost WINSTAT-220 Started PRIMO\ji53 15
03/28/26 07:44:35 PM python WINSTAT-220 Started PRIMO\ji53 15
03/28/26 07:44:34 PM 192.168.1.170 WINSTAT-219 SessionUnlock PRIMO\szheng244 5
03/28/26 07:44:34 PM LogonUI WINSTAT-219 Ended NT AUTHORITY\system 5 141
03/28/26 07:44:34 PM dwm WINSTAT-219 Ended WINDOW MANAGER\dw... 10 141
03/28/26 07:44:34 PM fontdrvhost WINSTAT-219 Ended FONT DRIVER HOST\... 10 47
03/28/26 07:44:34 PM CtxGfx WINSTAT-219 Ended NT AUTHORITY\system 10 125
03/28/26 07:44:34 PM LogonUI WINSTAT-219 Ended NT AUTHORITY\system 10 266
03/28/26 07:44:34 PM winlogon WINSTAT-219 Ended NT AUTHORITY\system 10 188
03/28/26 07:44:33 PM wscript WINSTAT-219 Started PRIMO\szheng244 5
03/28/26 07:44:33 PM 192.168.1.170 WINSTAT-219 RemoteConnect PRIMO\szheng244 5
03/28/26 07:44:33 PM TSTheme WINSTAT-219 Started PRIMO\szheng244 5
03/28/26 07:44:33 PM WINSTAT-219 RemoteDisconnect 10
03/28/26 07:44:32 PM conda WINSTAT-221 Started PRIMO\zjin287 2
03/28/26 07:44:32 PM python WINSTAT-221 Started PRIMO\zjin287 2
03/28/26 07:44:32 PM conhost WINSTAT-221 Started PRIMO\zjin287 2
03/28/26 07:44:32 PM cmd WINSTAT-221 Started PRIMO\zjin287 2
03/28/26 07:44:32 PM dwm WINSTAT-219 Started WINDOW MANAGER\dw... 10
03/28/26 07:44:32 PM CtxGfx WINSTAT-219 Started NT AUTHORITY\system 10
03/28/26 07:44:32 PM fontdrvhost WINSTAT-219 Started FONT DRIVER HOST\... 10
03/28/26 07:44:32 PM LogonUI WINSTAT-219 Started NT AUTHORITY\system 10
03/28/26 07:44:32 PM 192.168.1.170 WINSTAT-219 RemoteConnect 10
03/28/26 07:44:31 PM winlogon WINSTAT-219 Started NT AUTHORITY\system 10
03/28/26 07:44:30 PM conhost WINSTAT-224 Started PRIMO\broscious 5
03/28/26 07:44:30 PM conda WINSTAT-224 Started PRIMO\broscious 5
03/28/26 07:44:30 PM python WINSTAT-224 Started PRIMO\broscious 5
03/28/26 07:44:30 PM cmd WINSTAT-224 Started PRIMO\broscious 5
03/28/26 07:44:29 PM python WINSTAT-218 Ended PRIMO\sguo88 7 16
03/28/26 07:44:29 PM cmd WINSTAT-218 Ended PRIMO\sguo88 7 47
03/28/26 07:44:29 PM conda WINSTAT-218 Ended PRIMO\sguo88 7 16
03/28/26 07:44:29 PM conhost WINSTAT-218 Ended PRIMO\sguo88 7 16
03/28/26 07:44:29 PM python WINSTAT-218 Ended PRIMO\sguo88 7 1766
03/28/26 07:44:29 PM python WINSTAT-218 Ended PRIMO\sguo88 7 2141
03/28/26 07:44:29 PM python WINSTAT-218 Started PRIMO\sguo88 7
03/28/26 07:44:29 PM RuntimeBroker WINSTAT-S238 Ended PRIMO\sticali 33 203
03/28/26 07:44:29 PM svchost WINSTAT-S238 Ended PRIMO\sticali 33 219
03/28/26 07:44:29 PM RuntimeBroker WINSTAT-S238 Ended PRIMO\sticali 33 5688
03/28/26 07:44:29 PM svchost WINSTAT-S238 Ended PRIMO\sticali 33 78
03/28/26 07:44:29 PM WINSTAT-S238 SessionLogoff 33
03/28/26 07:44:29 PM conhost WINSTAT-S238 Ended PRIMO\sticali 33 94
03/28/26 07:44:29 PM powershell WINSTAT-S238 Ended PRIMO\sticali 33 391
03/28/26 07:44:29 PM csc WINSTAT-S238 Ended PRIMO\sticali 33 125
03/28/26 07:44:29 PM gpscript WINSTAT-S238 Ended PRIMO\sticali 33 16
03/28/26 07:44:28 PM csc WINSTAT-S238 Started PRIMO\sticali 33
03/28/26 07:44:28 PM conhost WINSTAT-S238 Started PRIMO\sticali 33
03/28/26 07:44:28 PM powershell WINSTAT-S238 Started PRIMO\sticali 33
03/28/26 07:44:27 PM RuntimeBroker WINSTAT-S238 Ended PRIMO\sticali 33 11344
03/28/26 07:44:27 PM ctfmon WINSTAT-S238 Ended PRIMO\sticali 33 1578
03/28/26 07:44:27 PM taskhostw WINSTAT-S238 Ended PRIMO\sticali 33 531
03/28/26 07:44:27 PM sihost WINSTAT-S238 Ended PRIMO\sticali 33 797
03/28/26 07:44:27 PM explorer WINSTAT-S238 Ended PRIMO\sticali 33 62672
03/28/26 07:44:27 PM gpscript WINSTAT-S238 Started PRIMO\sticali 33
03/28/26 07:44:27 PM ShellExperienceHost WINSTAT-S238 Ended PRIMO\sticali 33 625
03/28/26 07:44:27 PM SearchUI WINSTAT-S238 Ended PRIMO\sticali 33 2906
03/28/26 07:44:27 PM WfShell WINSTAT-S238 Ended PRIMO\sticali 33 688
03/28/26 07:44:26 PM firefox WINSTAT-218 Started PRIMO\ndao3 5
03/28/26 07:44:26 PM CtxGfx WINSTAT-S238 Ended PRIMO\sticali 33 3688
03/28/26 07:44:26 PM CtxMtHost WINSTAT-S238 Ended PRIMO\sticali 33 47
03/28/26 07:44:25 PM explorer WINSTAT-S238 Ended PRIMO\sticali 33 82797
03/28/26 07:44:25 PM csc_ui WINSTAT-S238 Ended PRIMO\sticali 33 2422
03/28/26 07:44:25 PM SCNotification WINSTAT-S238 Ended PRIMO\sticali 33 281
03/28/26 07:44:25 PM icak2meng WINSTAT-S238 Ended NT AUTHORITY\system 33 16
619 million total events