Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
06/02/26 11:49:07 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:07 AM python WINSTAT-201 Started PRIMO\broscious 3
06/02/26 11:49:07 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:07 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:06 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:05 AM Bginfo64 SILO-226 Ended PRIMO\font 26 297
06/02/26 11:49:05 AM conhost SILO-226 Ended PRIMO\font 26 125
06/02/26 11:49:05 AM cmd SILO-226 Ended PRIMO\font 26 156
06/02/26 11:49:04 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 31
06/02/26 11:49:04 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 62
06/02/26 11:49:04 AM powershell SILO-226 Ended PRIMO\font 26 875
06/02/26 11:49:04 AM Bginfo64 SILO-226 Started PRIMO\font 26
06/02/26 11:49:03 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:03 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:03 AM splwow64 WINSTAT-213 Ended PRIMO\rrtravis 2 266
06/02/26 11:49:02 AM python WINSTAT-207 Started PRIMO\ji53 16
06/02/26 11:49:02 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 62
06/02/26 11:49:02 AM python WINSTAT-201 Started PRIMO\broscious 3
06/02/26 11:49:02 AM powershell SILO-226 Ended PRIMO\font 26 453
06/02/26 11:49:02 AM powershell SILO-226 Started PRIMO\font 26
06/02/26 11:49:01 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/02/26 11:49:01 AM conda WINSTAT-201 Started PRIMO\broscious 3
06/02/26 11:49:01 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:49:01 AM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/02/26 11:49:01 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 62
06/02/26 11:49:01 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:49:01 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:49:01 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:01 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:01 AM conhost SILORD-004 Ended PRIMO\anitkowski 6 109
06/02/26 11:49:01 AM cmd SILORD-004 Ended PRIMO\anitkowski 6 172
06/02/26 11:49:01 AM Bginfo64 SILORD-004 Ended PRIMO\anitkowski 6 266
06/02/26 11:49:01 AM cmd WINSTAT-201 Started PRIMO\broscious 3
06/02/26 11:49:01 AM conhost WINSTAT-201 Started PRIMO\broscious 3
06/02/26 11:49:01 AM powershell SILO-226 Started PRIMO\font 26
06/02/26 11:49:01 AM powershell SILORD-004 Ended PRIMO\anitkowski 6 938
06/02/26 11:49:01 AM Bginfo64 SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:49:00 AM conhost SILO-226 Started PRIMO\font 26
06/02/26 11:49:00 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:00 AM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:00 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:00 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:00 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:49:00 AM cmd SILO-226 Started PRIMO\font 26
06/02/26 11:48:59 AM powershell SILORD-004 Ended PRIMO\anitkowski 6 453
06/02/26 11:48:59 AM powershell SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:58 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:48:58 AM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/02/26 11:48:58 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/02/26 11:48:58 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/02/26 11:48:58 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 31
06/02/26 11:48:58 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:48:58 AM powershell SILORD-004 Ended PRIMO\anitkowski 6 531
06/02/26 11:48:58 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 62
06/02/26 11:48:58 AM powershell SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:58 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:58 AM WMIC WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:58 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:58 AM powershell SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:57 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:57 AM cmd WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:57 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:57 AM taskhostw SILORD-004 Ended PRIMO\anitkowski 6 62
06/02/26 11:48:57 AM wscript SILORD-004 Ended PRIMO\anitkowski 6 156
06/02/26 11:48:57 AM LogonUI SILORD-004 Ended NT AUTHORITY\system 6 234
06/02/26 11:48:57 AM conhost SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:57 AM cmd SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:57 AM conhost WINSTAT-205 Started PRIMO\valdsbobes 8
06/02/26 11:48:57 AM taskhostw SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:57 AM wscript SILORD-004 Started PRIMO\anitkowski 6
06/02/26 11:48:57 AM 10.130.242.78 SILORD-004 SessionUnlock PRIMO\anitkowski 6
06/02/26 11:48:55 AM conhost WINSTAT-205 Ended PRIMO\valdsbobes 8 47
06/02/26 11:48:55 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 78
06/02/26 11:48:55 AM WMIC WINSTAT-205 Ended PRIMO\valdsbobes 8 109
06/02/26 11:48:55 AM cmd WINSTAT-205 Ended PRIMO\valdsbobes 8 94
647 million total events