Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
06/05/26 12:03:26 PM tasklist SILO-229 Started PRIMO\jluo73 18
06/05/26 12:03:25 PM wscript SILO-232 Ended PRIMO\kolbuck 13 266
06/05/26 12:03:25 PM conhost SILO-232 Started PRIMO\kolbuck 13
06/05/26 12:03:25 PM powershell SILO-232 Started PRIMO\kolbuck 13
06/05/26 12:03:25 PM cmd SILO-232 Started PRIMO\kolbuck 13
06/05/26 12:03:24 PM LogonUI SILO-232 Ended NT AUTHORITY\system 13 2516
06/05/26 12:03:24 PM LogonUI SILO-232 Ended NT AUTHORITY\system 30 297
06/05/26 12:03:24 PM CtxGfx SILO-232 Ended NT AUTHORITY\system 30 203
06/05/26 12:03:24 PM dwm SILO-232 Ended WINDOW MANAGER\dw... 30 94
06/05/26 12:03:24 PM winlogon SILO-232 Ended NT AUTHORITY\system 30 188
06/05/26 12:03:24 PM fontdrvhost SILO-232 Ended FONT DRIVER HOST\... 30 16
06/05/26 12:03:24 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/05/26 12:03:24 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/05/26 12:03:24 PM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/05/26 12:03:24 PM wscript SILO-232 Started PRIMO\kolbuck 13
06/05/26 12:03:24 PM 10.134.206.6 SILO-232 SessionUnlock PRIMO\kolbuck 13
06/05/26 12:03:24 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 31
06/05/26 12:03:24 PM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:24 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/05/26 12:03:24 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:24 PM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:24 PM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:24 PM 10.134.206.6 SILO-232 RemoteConnect PRIMO\kolbuck 13
06/05/26 12:03:24 PM TSTheme SILO-232 Started PRIMO\kolbuck 13
06/05/26 12:03:24 PM SILO-232 RemoteDisconnect 30
06/05/26 12:03:24 PM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:24 PM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:23 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:21 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 31
06/05/26 12:03:21 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/05/26 12:03:21 PM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/05/26 12:03:21 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:21 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:21 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:21 PM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:21 PM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:21 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:21 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:19 PM CtxGfx SILO-232 Started NT AUTHORITY\system 30
06/05/26 12:03:19 PM LogonUI SILO-232 Started NT AUTHORITY\system 30
06/05/26 12:03:19 PM dwm SILO-232 Started WINDOW MANAGER\dw... 30
06/05/26 12:03:19 PM fontdrvhost SILO-232 Started FONT DRIVER HOST\... 30
06/05/26 12:03:19 PM 10.134.206.6 SILO-232 RemoteConnect 30
06/05/26 12:03:19 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 31
06/05/26 12:03:19 PM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 172
06/05/26 12:03:19 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:19 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/05/26 12:03:18 PM acrodist WINSTAT-S210 Started PRIMO\zachguest 22
06/05/26 12:03:18 PM winlogon SILO-232 Started NT AUTHORITY\system 30
06/05/26 12:03:18 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:18 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:18 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:18 PM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:18 PM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:18 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:18 PM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:18 PM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/05/26 12:03:17 PM python WINSTAT-205 Started PRIMO\sguo88 2
06/05/26 12:03:17 PM conda WINSTAT-207 Started PRIMO\ji53 16
06/05/26 12:03:17 PM conhost WINSTAT-207 Started PRIMO\ji53 16
06/05/26 12:03:17 PM python WINSTAT-205 Ended PRIMO\sguo88 2 62
06/05/26 12:03:17 PM cmd WINSTAT-207 Started PRIMO\ji53 16
06/05/26 12:03:17 PM conhost WINSTAT-205 Ended PRIMO\sguo88 2 62
06/05/26 12:03:17 PM python WINSTAT-205 Ended PRIMO\sguo88 2 5297
06/05/26 12:03:17 PM cmd WINSTAT-205 Ended PRIMO\sguo88 2 78
06/05/26 12:03:17 PM conda WINSTAT-205 Ended PRIMO\sguo88 2 47
06/05/26 12:03:17 PM python WINSTAT-205 Started PRIMO\sguo88 2
06/05/26 12:03:16 PM python WINSTAT-205 Ended PRIMO\sguo88 2 3188
06/05/26 12:03:16 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 62
06/05/26 12:03:16 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/05/26 12:03:16 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/05/26 12:03:16 PM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 141
06/05/26 12:03:16 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/05/26 12:03:15 PM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/05/26 12:03:15 PM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 78
649 million total events