Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
07/09/26 11:55:36 AM runonce WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:35 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:35 AM smartscreen WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:35 AM RuntimeBroker WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:34 AM explorer WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:31 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-S204 Ended PRIMO\mwm58 30 31
07/09/26 11:55:30 AM SCNotification WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:30 AM SDXHelper SILO-230 Ended PRIMO\ako6 52 266
07/09/26 11:55:28 AM conhost WINSTAT-S204 Ended PRIMO\mwm58 30 188
07/09/26 11:55:28 AM Bginfo64 WINSTAT-S204 Ended PRIMO\mwm58 30 234
07/09/26 11:55:28 AM cmd WINSTAT-S204 Ended PRIMO\mwm58 30 188
07/09/26 11:55:28 AM mobsync WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:28 AM SDXHelper SILO-230 Started PRIMO\ako6 52
07/09/26 11:55:27 AM powershell WINSTAT-S204 Ended PRIMO\mwm58 30 1188
07/09/26 11:55:27 AM Bginfo64 WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:27 AM SDXHelper SILO-230 Started PRIMO\ako6 52
07/09/26 11:55:25 AM acrodist WINSTAT-S235 Started PRIMO\lmpanton 40
07/09/26 11:55:25 AM backgroundTaskHost WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:25 AM backgroundTaskHost WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:25 AM RuntimeBroker WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:24 AM RuntimeBroker WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:24 AM SearchUI WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:24 AM ShellExperienceHost WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:24 AM conhost WINSTAT-220 Ended PRIMO\ji53 3 47
07/09/26 11:55:24 AM python WINSTAT-220 Ended PRIMO\hyoon76 6 16
07/09/26 11:55:24 AM python WINSTAT-220 Ended PRIMO\ji53 3 3359
07/09/26 11:55:24 AM conda WINSTAT-220 Ended PRIMO\ji53 3 16
07/09/26 11:55:24 AM cmd WINSTAT-220 Ended PRIMO\ji53 3 16
07/09/26 11:55:24 AM TSTheme WINSTAT-S204 Ended PRIMO\mwm58 30 31
07/09/26 11:55:24 AM conhost WINSTAT-220 Ended PRIMO\hyoon76 6 31
07/09/26 11:55:24 AM conda WINSTAT-220 Ended PRIMO\hyoon76 6 31
07/09/26 11:55:24 AM python WINSTAT-220 Ended PRIMO\ji53 3 2531
07/09/26 11:55:24 AM python WINSTAT-220 Ended PRIMO\hyoon76 6 1562
07/09/26 11:55:24 AM cmd WINSTAT-220 Ended PRIMO\hyoon76 6 62
07/09/26 11:55:24 AM python WINSTAT-220 Started PRIMO\hyoon76 6
07/09/26 11:55:23 AM python WINSTAT-220 Ended PRIMO\hyoon76 6 859
07/09/26 11:55:23 AM powershell WINSTAT-S204 Ended PRIMO\mwm58 30 438
07/09/26 11:55:23 AM powershell WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:23 AM quser WINSTAT-S204 Ended PRIMO\mwm58 30 78
07/09/26 11:55:23 AM rundll32 WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:23 AM quser WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:22 AM python WINSTAT-225 Ended PRIMO\sguo88 2 31
07/09/26 11:55:22 AM conhost WINSTAT-225 Ended PRIMO\sguo88 2 31
07/09/26 11:55:22 AM powershell WINSTAT-S204 Ended PRIMO\mwm58 30 578
07/09/26 11:55:22 AM consent WINSTAT-S204 Ended NT AUTHORITY\system 30 62
07/09/26 11:55:22 AM CtxMtHost WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:22 AM powershell WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:22 AM python WINSTAT-225 Ended PRIMO\sguo88 2 969
07/09/26 11:55:22 AM conda WINSTAT-225 Ended PRIMO\sguo88 2 47
07/09/26 11:55:22 AM cmd WINSTAT-225 Ended PRIMO\sguo88 2 16
07/09/26 11:55:22 AM python WINSTAT-225 Ended PRIMO\sguo88 2 3078
07/09/26 11:55:22 AM conhost WINSTAT-225 Ended PRIMO\sguo88 2 47
07/09/26 11:55:22 AM python WINSTAT-225 Started PRIMO\sguo88 2
07/09/26 11:55:22 AM conhost WINSTAT-225 Started PRIMO\sguo88 2
07/09/26 11:55:22 AM consent WINSTAT-S204 Started NT AUTHORITY\system 30
07/09/26 11:55:21 AM cmstart WINSTAT-S204 Ended PRIMO\mwm58 30 31
07/09/26 11:55:21 AM explorer WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:21 AM powershell WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:21 AM conhost WINSTAT-S204 Ended PRIMO\mwm58 30 172
07/09/26 11:55:21 AM wscript WINSTAT-S204 Ended PRIMO\mwm58 30 328
07/09/26 11:55:21 AM conhost WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:21 AM Citrix.Authentication.VirtualSmartcard.Launcher WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:21 AM cmd WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:20 AM acregl WINSTAT-S204 Ended PRIMO\mwm58 30 16
07/09/26 11:55:20 AM conhost WINSTAT-S204 Ended PRIMO\mwm58 30 16
07/09/26 11:55:20 AM taskhostw WINSTAT-S204 Ended PRIMO\mwm58 30 78
07/09/26 11:55:20 AM cmd WINSTAT-S204 Ended PRIMO\mwm58 30 62
07/09/26 11:55:20 AM WfShell WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:20 AM cmstart WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:20 AM VdaRedirector WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:20 AM UpdateTrustedSites WINSTAT-S204 Ended PRIMO\mwm58 30 31
07/09/26 11:55:20 AM taskhostw WINSTAT-S204 Ended PRIMO\mwm58 30 141
07/09/26 11:55:20 AM acregl WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:19 AM UpdateTrustedSites WINSTAT-S204 Started PRIMO\mwm58 30
07/09/26 11:55:19 AM conhost WINSTAT-S204 Started PRIMO\mwm58 30
665 million total events