Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
03/27/26 07:53:54 AM conhost WINSTAT-223 Ended PRIMO\elee73 5 31
03/27/26 07:53:54 AM tasklist WINSTAT-223 Ended PRIMO\elee73 5 94
03/27/26 07:53:54 AM firefox WINSTAT-212 Ended PRIMO\vachuska 6 141
03/27/26 07:53:54 AM conhost WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:54 AM tasklist WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:53 AM conhost WINSTAT-223 Ended PRIMO\elee73 5 16
03/27/26 07:53:53 AM tasklist WINSTAT-223 Ended PRIMO\elee73 5 94
03/27/26 07:53:53 AM conhost WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:53 AM tasklist WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:53 AM conhost WINSTAT-223 Ended PRIMO\elee73 5 16
03/27/26 07:53:53 AM tasklist WINSTAT-223 Ended PRIMO\elee73 5 94
03/27/26 07:53:53 AM conhost WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:53 AM tasklist WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:49 AM python WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:46 AM Acrobat SILO-230 Started PRIMO\spkolstad 3
03/27/26 07:53:46 AM Acrobat SILO-230 Started PRIMO\spkolstad 3
03/27/26 07:53:44 AM conhost SILO-226 Ended PRIMO\jluo73 45 31
03/27/26 07:53:44 AM tasklist SILO-226 Ended PRIMO\jluo73 45 94
03/27/26 07:53:44 AM conhost SILO-226 Started PRIMO\jluo73 45
03/27/26 07:53:44 AM tasklist SILO-226 Started PRIMO\jluo73 45
03/27/26 07:53:42 AM python WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:42 AM python WINSTAT-218 Ended PRIMO\sguo88 7 47
03/27/26 07:53:42 AM conhost WINSTAT-218 Ended PRIMO\sguo88 7 47
03/27/26 07:53:42 AM cmd WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:42 AM conhost WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:42 AM conda WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:42 AM conhost WINSTAT-218 Ended PRIMO\sguo88 7 31
03/27/26 07:53:42 AM python WINSTAT-218 Ended PRIMO\sguo88 7 1469
03/27/26 07:53:42 AM conda WINSTAT-218 Ended PRIMO\sguo88 7 16
03/27/26 07:53:42 AM cmd WINSTAT-218 Ended PRIMO\sguo88 7 62
03/27/26 07:53:42 AM python WINSTAT-218 Started PRIMO\sguo88 7
03/27/26 07:53:42 AM conhost WINSTAT-218 Started PRIMO\sguo88 7
03/27/26 07:53:42 AM python WINSTAT-218 Ended PRIMO\sguo88 7 2312
03/27/26 07:53:41 AM conhost WINSTAT-223 Ended PRIMO\shost 4 172
03/27/26 07:53:41 AM TSTheme WINSTAT-223 Ended PRIMO\shost 4 47
03/27/26 07:53:40 AM powershell WINSTAT-223 Ended PRIMO\shost 4 875
03/27/26 07:53:38 AM quser WINSTAT-223 Ended PRIMO\shost 4 94
03/27/26 07:53:38 AM powershell WINSTAT-223 Ended PRIMO\shost 4 422
03/27/26 07:53:38 AM powershell WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:37 AM quser WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:37 AM firefox WINSTAT-223 Started PRIMO\elee73 5
03/27/26 07:53:37 AM backgroundTaskHost WINSTAT-201 Ended PRIMO\shwang97 2 78
03/27/26 07:53:37 AM powershell WINSTAT-223 Ended PRIMO\shost 4 484
03/27/26 07:53:37 AM powershell WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:37 AM backgroundTaskHost WINSTAT-201 Started PRIMO\shwang97 2
03/27/26 07:53:36 AM powershell WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:36 AM LogonUI WINSTAT-223 Ended NT AUTHORITY\system 4 625
03/27/26 07:53:36 AM wscript WINSTAT-223 Ended PRIMO\shost 4 203
03/27/26 07:53:36 AM conhost WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:36 AM 192.168.180.204 WINSTAT-223 SessionUnlock PRIMO\shost 4
03/27/26 07:53:35 AM python WINSTAT-218 Started PRIMO\sguo88 7
03/27/26 07:53:35 AM CtxGfx WINSTAT-223 Ended NT AUTHORITY\system 14 94
03/27/26 07:53:35 AM winlogon WINSTAT-223 Ended NT AUTHORITY\system 14 125
03/27/26 07:53:35 AM dwm WINSTAT-223 Ended WINDOW MANAGER\dw... 14 203
03/27/26 07:53:35 AM LogonUI WINSTAT-223 Ended NT AUTHORITY\system 14 281
03/27/26 07:53:35 AM fontdrvhost WINSTAT-223 Ended FONT DRIVER HOST\... 14
03/27/26 07:53:35 AM wscript WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:35 AM 192.168.180.204 WINSTAT-223 RemoteConnect PRIMO\shost 4
03/27/26 07:53:35 AM TSTheme WINSTAT-223 Started PRIMO\shost 4
03/27/26 07:53:35 AM WINSTAT-223 RemoteDisconnect 14
03/27/26 07:53:33 AM conhost WINSTAT-221 Ended PRIMO\zjin287 2 31
03/27/26 07:53:33 AM python WINSTAT-221 Ended PRIMO\zjin287 2 31
03/27/26 07:53:33 AM CtxGfx WINSTAT-223 Started NT AUTHORITY\system 14
03/27/26 07:53:33 AM conda WINSTAT-221 Ended PRIMO\zjin287 2 16
03/27/26 07:53:33 AM cmd WINSTAT-221 Ended PRIMO\zjin287 2 16
03/27/26 07:53:33 AM conhost WINSTAT-221 Ended PRIMO\zjin287 2 47
03/27/26 07:53:33 AM python WINSTAT-221 Ended PRIMO\zjin287 2 2422
03/27/26 07:53:33 AM python WINSTAT-221 Ended PRIMO\zjin287 2 938
03/27/26 07:53:33 AM conhost WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:33 AM python WINSTAT-221 Started PRIMO\zjin287 2
03/27/26 07:53:33 AM 192.168.180.204 WINSTAT-223 RemoteConnect 14
03/27/26 07:53:33 AM dwm WINSTAT-223 Started WINDOW MANAGER\dw... 14
03/27/26 07:53:33 AM LogonUI WINSTAT-223 Started NT AUTHORITY\system 14
03/27/26 07:53:33 AM fontdrvhost WINSTAT-223 Started FONT DRIVER HOST\... 14
03/27/26 07:53:33 AM winlogon WINSTAT-223 Started NT AUTHORITY\system 14
618 million total events