Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
08/21/26 11:22:56 AM conhost WINSTAT-214 Started PRIMO\sguo88 4
08/21/26 11:22:56 AM conda WINSTAT-214 Started PRIMO\sguo88 4
08/21/26 11:22:56 AM python WINSTAT-214 Started PRIMO\sguo88 4
08/21/26 11:22:56 AM cmd WINSTAT-214 Started PRIMO\sguo88 4
08/21/26 11:22:55 AM powershell SILO-231 Ended PRIMO\koo22 2 375
08/21/26 11:22:55 AM powershell SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM powershell SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM splwow64 WINSTAT-S209 Started PRIMO\lmpanton 8
08/21/26 11:22:54 AM CRWindowsClientService SILO-227 Ended PRIMO\pebergmann 4 47
08/21/26 11:22:54 AM fontdrvhost SILO-231 Ended FONT DRIVER HOST\... 14 62
08/21/26 11:22:54 AM dwm SILO-231 Ended WINDOW MANAGER\dw... 14 219
08/21/26 11:22:54 AM wscript SILO-231 Ended PRIMO\koo22 2 109
08/21/26 11:22:54 AM winlogon SILO-231 Ended NT AUTHORITY\system 14 78
08/21/26 11:22:54 AM LogonUI SILO-231 Ended NT AUTHORITY\system 2 172
08/21/26 11:22:54 AM taskhostw SILO-231 Ended PRIMO\koo22 2 16
08/21/26 11:22:54 AM cmd SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM conhost SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM CRWindowsClientService SILO-227 Started PRIMO\pebergmann 4
08/21/26 11:22:54 AM CtxGfx SILO-231 Ended NT AUTHORITY\system 14 109
08/21/26 11:22:54 AM LogonUI SILO-231 Ended NT AUTHORITY\system 14 250
08/21/26 11:22:54 AM wscript SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM taskhostw SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:54 AM 192.168.1.12 SILO-231 SessionUnlock PRIMO\koo22 2
08/21/26 11:22:54 AM 192.168.1.12 SILO-231 RemoteConnect PRIMO\koo22 2
08/21/26 11:22:53 AM TSTheme SILO-231 Started PRIMO\koo22 2
08/21/26 11:22:53 AM backgroundTaskHost WINSTAT-S235 Ended PRIMO\erynes 7 78
08/21/26 11:22:53 AM SILO-231 RemoteDisconnect 14
08/21/26 11:22:50 AM CtxGfx SILO-231 Started NT AUTHORITY\system 14
08/21/26 11:22:50 AM 192.168.1.12 SILO-231 RemoteConnect 14
08/21/26 11:22:49 AM fontdrvhost SILO-231 Started FONT DRIVER HOST\... 14
08/21/26 11:22:49 AM dwm SILO-231 Started WINDOW MANAGER\dw... 14
08/21/26 11:22:49 AM LogonUI SILO-231 Started NT AUTHORITY\system 14
08/21/26 11:22:49 AM Bginfo64 WINSTAT-224 Ended PRIMO\ychen2366 9 172
08/21/26 11:22:49 AM conhost WINSTAT-224 Ended PRIMO\ychen2366 9 31
08/21/26 11:22:49 AM cmd WINSTAT-224 Ended PRIMO\ychen2366 9 47
08/21/26 11:22:49 AM winlogon SILO-231 Started NT AUTHORITY\system 14
08/21/26 11:22:48 AM powershell WINSTAT-224 Ended PRIMO\ychen2366 9 797
08/21/26 11:22:48 AM Bginfo64 WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:46 AM powershell WINSTAT-224 Ended PRIMO\ychen2366 9 391
08/21/26 11:22:46 AM powershell WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:45 AM wscript WINSTAT-224 Ended PRIMO\ychen2366 9 47
08/21/26 11:22:45 AM powershell WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:45 AM conhost WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:45 AM cmd WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:45 AM LogonUI WINSTAT-224 Ended NT AUTHORITY\system 9 234
08/21/26 11:22:45 AM wscript WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:45 AM 10.252.0.253 WINSTAT-224 SessionUnlock PRIMO\ychen2366 9
08/21/26 11:22:37 AM WINSTAT-224 SessionLock PRIMO\ychen2366 9
08/21/26 11:22:36 AM scrnsave.scr WINSTAT-224 Ended PRIMO\ychen2366 9 16
08/21/26 11:22:36 AM LogonUI WINSTAT-224 Started NT AUTHORITY\system 9
08/21/26 11:22:31 AM scrnsave.scr WINSTAT-224 Started PRIMO\ychen2366 9
08/21/26 11:22:28 AM firefox WINSTAT-212 Started PRIMO\vachuska 2
08/21/26 11:22:23 AM TabTip SILO-228 Started NT AUTHORITY\system 8
08/21/26 11:22:23 AM SILO-228 SessionLock PRIMO\lshah4 8
08/21/26 11:22:23 AM scrnsave.scr SILO-228 Ended PRIMO\lshah4 8 16
08/21/26 11:22:23 AM LogonUI SILO-228 Started NT AUTHORITY\system 8
08/21/26 11:22:19 AM RuntimeBroker WINSTAT-S209 Ended PRIMO\lmpanton 8 47
08/21/26 11:22:18 AM scrnsave.scr SILO-228 Started PRIMO\lshah4 8
08/21/26 11:22:05 AM firefox WINSTAT-S203 Ended PRIMO\assad 8 109
08/21/26 11:22:02 AM TSTheme SILO-230 Ended PRIMO\ako6 8 31
08/21/26 11:22:00 AM cmd SILO-230 Ended PRIMO\ako6 8 62
08/21/26 11:22:00 AM Bginfo64 SILO-230 Ended PRIMO\ako6 8 156
08/21/26 11:22:00 AM conhost SILO-230 Ended PRIMO\ako6 8 62
08/21/26 11:21:59 AM Bginfo64 SILO-230 Started PRIMO\ako6 8
08/21/26 11:21:59 AM powershell SILO-230 Ended PRIMO\ako6 8 688
08/21/26 11:21:59 AM cmd WINSTAT-214 Ended PRIMO\sguo88 4 16
08/21/26 11:21:59 AM python WINSTAT-214 Ended PRIMO\sguo88 4 1953
08/21/26 11:21:59 AM conda WINSTAT-214 Ended PRIMO\sguo88 4 31
08/21/26 11:21:59 AM conhost WINSTAT-214 Ended PRIMO\sguo88 4 62
08/21/26 11:21:57 AM powershell SILO-230 Ended PRIMO\ako6 8 438
08/21/26 11:21:57 AM quser SILO-230 Ended PRIMO\ako6 8
08/21/26 11:21:57 AM powershell SILO-230 Started PRIMO\ako6 8
08/21/26 11:21:57 AM quser SILO-230 Started PRIMO\ako6 8
08/21/26 11:21:56 AM powershell SILO-230 Started PRIMO\ako6 8
08/21/26 11:21:56 AM wscript SILO-230 Ended PRIMO\ako6 8 94
680 million total events