Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
10/22/26 02:41:11 AM firefox WINSTAT-222 Ended PRIMO\vachuska 4 78
10/22/26 02:41:02 AM scrnsave.scr WINSTAT-S209 Ended PRIMO\she326 5 47
10/22/26 02:41:02 AM WINSTAT-S209 SessionLock PRIMO\she326 5
10/22/26 02:41:02 AM LogonUI WINSTAT-S209 Started NT AUTHORITY\system 5
10/22/26 02:40:57 AM scrnsave.scr WINSTAT-S209 Started PRIMO\she326 5
10/22/26 02:40:49 AM python WINSTAT-220 Ended PRIMO\sguo88 3 16
10/22/26 02:40:49 AM conda WINSTAT-220 Ended PRIMO\sguo88 3 31
10/22/26 02:40:49 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 31
10/22/26 02:40:49 AM python WINSTAT-220 Ended PRIMO\sguo88 3 1078
10/22/26 02:40:49 AM cmd WINSTAT-220 Ended PRIMO\sguo88 3 16
10/22/26 02:40:49 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:40:48 AM conda WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:40:48 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:40:47 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:40:47 AM cmd WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:40:41 AM firefox WINSTAT-222 Started PRIMO\vachuska 4
10/22/26 02:40:22 AM backgroundTaskHost WINSTAT-221 Ended PRIMO\hli434 4 47
10/22/26 02:40:18 AM Bginfo64 SILO-229 Ended PRIMO\mmaury 5 141
10/22/26 02:40:18 AM conhost SILO-229 Ended PRIMO\mmaury 5 78
10/22/26 02:40:18 AM cmd SILO-229 Ended PRIMO\mmaury 5 47
10/22/26 02:40:17 AM Bginfo64 SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:17 AM backgroundTaskHost WINSTAT-221 Ended PRIMO\hli434 4 47
10/22/26 02:40:17 AM powershell SILO-229 Ended PRIMO\mmaury 5 719
10/22/26 02:40:17 AM backgroundTaskHost WINSTAT-221 Ended PRIMO\wgong28 3 47
10/22/26 02:40:17 AM backgroundTaskHost WINSTAT-221 Ended PRIMO\shuo3 2 47
10/22/26 02:40:15 AM conhost WINSTAT-221 Ended PRIMO\hli434 4 47
10/22/26 02:40:15 AM Bginfo64 WINSTAT-221 Ended PRIMO\hli434 4 94
10/22/26 02:40:15 AM cmd WINSTAT-221 Ended PRIMO\hli434 4 31
10/22/26 02:40:15 AM powershell SILO-229 Ended PRIMO\mmaury 5 375
10/22/26 02:40:15 AM powershell SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:15 AM powershell WINSTAT-221 Ended PRIMO\hli434 4 703
10/22/26 02:40:15 AM Bginfo64 WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:14 AM powershell SILO-229 Ended PRIMO\mmaury 5 375
10/22/26 02:40:14 AM powershell SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:14 AM powershell SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:14 AM wscript SILO-229 Ended PRIMO\mmaury 5 47
10/22/26 02:40:14 AM conhost SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:14 AM cmd SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:13 AM wscript SILO-229 Started PRIMO\mmaury 5
10/22/26 02:40:13 AM powershell WINSTAT-221 Ended PRIMO\hli434 4 328
10/22/26 02:40:13 AM powershell WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:12 AM powershell WINSTAT-221 Ended PRIMO\hli434 4 453
10/22/26 02:40:12 AM conhost WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:12 AM cmd WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:12 AM powershell WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:11 AM rundll32 WINSTAT-221 Ended PRIMO\hli434 4 16
10/22/26 02:40:11 AM VdaRedirector WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:40:11 AM powershell WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:49 AM python WINSTAT-220 Ended PRIMO\sguo88 3 16
10/22/26 02:39:49 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 31
10/22/26 02:39:49 AM cmd WINSTAT-220 Ended PRIMO\sguo88 3 16
10/22/26 02:39:49 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 31
10/22/26 02:39:49 AM python WINSTAT-220 Ended PRIMO\sguo88 3 1062
10/22/26 02:39:49 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:39:49 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:39:48 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:39:47 AM cmd WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:39:47 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/22/26 02:39:46 AM rundll32 WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:40 AM rundll32 WINSTAT-221 Ended PRIMO\hli434 4 16
10/22/26 02:39:37 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-221 Ended PRIMO\hli434 4 16
10/22/26 02:39:37 AM userinit WINSTAT-221 Ended PRIMO\hli434 4 78
10/22/26 02:39:36 AM explorer WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:36 AM firefox WINSTAT-222 Started PRIMO\vachuska 4
10/22/26 02:39:30 AM mobsync WINSTAT-221 Ended PRIMO\hli434 4 78
10/22/26 02:39:29 AM runonce WINSTAT-221 Ended PRIMO\hli434 4 62
10/22/26 02:39:28 AM consent WINSTAT-221 Ended NT AUTHORITY\system 4 31
10/22/26 02:39:28 AM RuntimeBroker WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:28 AM runonce WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:28 AM consent WINSTAT-221 Started NT AUTHORITY\system 4
10/22/26 02:39:27 AM SecurityHealthSystray WINSTAT-221 Ended PRIMO\hli434 4 16
10/22/26 02:39:27 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:27 AM SecurityHealthSystray WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:25 AM SCNotification WINSTAT-221 Started PRIMO\hli434 4
10/22/26 02:39:23 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-221 Ended PRIMO\hli434 4 16
695 million total events