Export to Excel
| Time | Name | Machine | Desc | User | Sess | CPU |
|---|---|---|---|---|---|---|
| 09/15/26 03:18:32 PM | sleep | WINSTAT-211 | Ended | PRIMO\hyoon76 | 6 | 31 |
| 09/15/26 03:18:32 PM | sleep | WINSTAT-211 | Ended | PRIMO\hyoon76 | 6 | 31 |
| 09/15/26 03:18:32 PM | sleep | WINSTAT-211 | Started | PRIMO\hyoon76 | 6 | |
| 09/15/26 03:18:32 PM | sleep | WINSTAT-211 | Started | PRIMO\hyoon76 | 6 | |
| 09/15/26 03:18:32 PM | SCToastNotification | WINSTAT-219 | Ended | PRIMO\gurindapalli | 4 | 109 |
| 09/15/26 03:18:31 PM | SCToastNotification | WINSTAT-219 | Ended | PRIMO\iswift | 5 | 125 |
| 09/15/26 03:18:31 PM | SCToastNotification | WINSTAT-219 | Ended | PRIMO\edgel | 11 | 109 |
| 09/15/26 03:18:29 PM | WINSTAT-207 | SessionLock | PRIMO\mcmain | 25 | ||
| 09/15/26 03:18:29 PM | TSTheme | WINSTAT-207 | Started | PRIMO\mcmain | 25 | |
| 09/15/26 03:18:29 PM | LogonUI | WINSTAT-207 | Started | NT AUTHORITY\system | 25 | |
| 09/15/26 03:18:29 PM | WINSTAT-207 | RemoteDisconnect | PRIMO\mcmain | 25 | ||
| 09/15/26 03:18:27 PM | notepad++ | WINSTAT-220 | Ended | PRIMO\crsmith35 | 17 | 1391 |
| 09/15/26 03:18:26 PM | TSTheme | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 31 |
| 09/15/26 03:18:26 PM | Bginfo64 | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:26 PM | Bginfo64 | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:26 PM | powershell | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 1469 |
| 09/15/26 03:18:26 PM | powershell | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 1672 |
| 09/15/26 03:18:24 PM | StataSE-64 | WINSTAT-207 | Ended | PRIMO\mcmain | 25 | 287109 |
| 09/15/26 03:18:24 PM | firefox | WINSTAT-222 | Started | PRIMO\awarner7 | 5 | |
| 09/15/26 03:18:23 PM | powershell | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 656 |
| 09/15/26 03:18:23 PM | powershell | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:23 PM | LogonUI | WINSTAT-205 | Ended | NT AUTHORITY\system | 5 | 453 |
| 09/15/26 03:18:23 PM | powershell | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:22 PM | wscript | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 156 |
| 09/15/26 03:18:22 PM | powershell | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:22 PM | conhost | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:22 PM | taskhostw | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 31 |
| 09/15/26 03:18:21 PM | taskhostw | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:21 PM | wscript | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:21 PM | 192.168.86.48 | WINSTAT-205 | SessionUnlock | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:21 PM | wscript | WINSTAT-205 | Ended | PRIMO\dzhang348 | 5 | 156 |
| 09/15/26 03:18:21 PM | cmd | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:21 PM | conhost | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:21 PM | dwm | WINSTAT-205 | Ended | WINDOW MANAGER\dw... | 19 | 250 |
| 09/15/26 03:18:21 PM | winlogon | WINSTAT-205 | Ended | NT AUTHORITY\system | 19 | 250 |
| 09/15/26 03:18:21 PM | fontdrvhost | WINSTAT-205 | Ended | FONT DRIVER HOST\... | 19 | 31 |
| 09/15/26 03:18:21 PM | CtxGfx | WINSTAT-205 | Ended | NT AUTHORITY\system | 19 | 266 |
| 09/15/26 03:18:21 PM | LogonUI | WINSTAT-205 | Ended | NT AUTHORITY\system | 19 | 500 |
| 09/15/26 03:18:20 PM | TSTheme | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:20 PM | wscript | WINSTAT-205 | Started | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:20 PM | 192.168.86.48 | WINSTAT-205 | RemoteConnect | PRIMO\dzhang348 | 5 | |
| 09/15/26 03:18:20 PM | WINSTAT-205 | RemoteDisconnect | 19 | |||
| 09/15/26 03:18:18 PM | dwm | WINSTAT-205 | Started | WINDOW MANAGER\dw... | 19 | |
| 09/15/26 03:18:18 PM | fontdrvhost | WINSTAT-205 | Started | FONT DRIVER HOST\... | 19 | |
| 09/15/26 03:18:18 PM | CtxGfx | WINSTAT-205 | Started | NT AUTHORITY\system | 19 | |
| 09/15/26 03:18:18 PM | LogonUI | WINSTAT-205 | Started | NT AUTHORITY\system | 19 | |
| 09/15/26 03:18:18 PM | 192.168.86.48 | WINSTAT-205 | RemoteConnect | 19 | ||
| 09/15/26 03:18:18 PM | winlogon | WINSTAT-205 | Started | NT AUTHORITY\system | 19 | |
| 09/15/26 03:18:17 PM | TabTip | WINSTAT-211 | Started | NT AUTHORITY\system | 10 | |
| 09/15/26 03:18:17 PM | WINSTAT-211 | SessionLock | PRIMO\gaguilera | 10 | ||
| 09/15/26 03:18:17 PM | scrnsave.scr | WINSTAT-211 | Ended | PRIMO\gaguilera | 10 | 78 |
| 09/15/26 03:18:12 PM | scrnsave.scr | WINSTAT-211 | Started | PRIMO\gaguilera | 10 | |
| 09/15/26 03:18:11 PM | sleep | WINSTAT-211 | Ended | PRIMO\hyoon76 | 6 | 31 |
| 09/15/26 03:18:11 PM | sleep | WINSTAT-211 | Started | PRIMO\hyoon76 | 6 | |
| 09/15/26 03:18:11 PM | firefox | WINSTAT-S205 | Started | PRIMO\assad | 23 | |
| 09/15/26 03:18:09 PM | SDXHelper | WINSTAT-S205 | Ended | PRIMO\assad | 23 | 234 |
| 09/15/26 03:18:07 PM | SCToastNotification | WINSTAT-223 | Ended | PRIMO\xzhan23 | 2 | 141 |
| 09/15/26 03:18:07 PM | conhost | SILO-230 | Ended | PRIMO\mjdarby | 45 | 47 |
| 09/15/26 03:18:07 PM | Bginfo64 | SILO-230 | Ended | PRIMO\mjdarby | 45 | 141 |
| 09/15/26 03:18:07 PM | cmd | SILO-230 | Ended | PRIMO\mjdarby | 45 | 62 |
| 09/15/26 03:18:06 PM | SCToastNotification | WINSTAT-225 | Ended | PRIMO\herreracaice | 8 | 125 |
| 09/15/26 03:18:06 PM | Bginfo64 | SILO-230 | Started | PRIMO\mjdarby | 45 | |
| 09/15/26 03:18:06 PM | powershell | SILO-230 | Ended | PRIMO\mjdarby | 45 | 797 |
| 09/15/26 03:18:05 PM | SCToastNotification | WINSTAT-225 | Started | PRIMO\ndao3 | 2 | |
| 09/15/26 03:18:05 PM | SCToastNotification | WINSTAT-225 | Started | PRIMO\sqian48 | 5 | |
| 09/15/26 03:18:05 PM | SCToastNotification | WINSTAT-225 | Started | PRIMO\herreracaice | 8 | |
| 09/15/26 03:18:05 PM | taskhostw | SILO-232 | Ended | PRIMO\kolbuck | 4 | 47 |
| 09/15/26 03:18:05 PM | taskhostw | SILO-232 | Started | PRIMO\kolbuck | 4 | |
| 09/15/26 03:18:04 PM | powershell | SILO-230 | Ended | PRIMO\mjdarby | 45 | 422 |
| 09/15/26 03:18:04 PM | powershell | SILO-230 | Started | PRIMO\mjdarby | 45 | |
| 09/15/26 03:18:03 PM | wscript | SILO-230 | Ended | PRIMO\mjdarby | 45 | 78 |
| 09/15/26 03:18:03 PM | LogonUI | SILO-230 | Ended | NT AUTHORITY\system | 45 | 297 |
| 09/15/26 03:18:03 PM | powershell | SILO-230 | Started | PRIMO\mjdarby | 45 | |
| 09/15/26 03:18:03 PM | conhost | SILO-230 | Started | PRIMO\mjdarby | 45 | |
| 09/15/26 03:18:03 PM | cmd | SILO-230 | Started | PRIMO\mjdarby | 45 | |
| 688 million total events | ||||||