Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
10/23/26 02:39:16 AM firefox CADSTAT-01 Started AD\heise-ou 1
10/23/26 02:39:16 AM firefox CADSTAT-01 Started AD\heise-ou 1
10/23/26 02:39:02 AM firefox WINSTAT-222 Ended PRIMO\vachuska 4 109
10/23/26 02:38:59 AM python WINSTAT-220 Ended PRIMO\sguo88 3 31
10/23/26 02:38:59 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 62
10/23/26 02:38:59 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:58 AM python WINSTAT-220 Ended PRIMO\sguo88 3 1156
10/23/26 02:38:58 AM cmd WINSTAT-220 Ended PRIMO\sguo88 3 31
10/23/26 02:38:58 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 31
10/23/26 02:38:58 AM conda WINSTAT-220 Ended PRIMO\sguo88 3
10/23/26 02:38:58 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:58 AM LogonUI WINSTAT-S209 Ended NT AUTHORITY\system 6 109
10/23/26 02:38:58 AM dwm WINSTAT-S209 Ended WINDOW MANAGER\dwm-6 6 5094
10/23/26 02:38:58 AM winlogon WINSTAT-S209 Ended NT AUTHORITY\system 6 484
10/23/26 02:38:58 AM fontdrvhost WINSTAT-S209 Ended FONT DRIVER HOST\... 6 141
10/23/26 02:38:57 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:57 AM cmd WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:57 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:57 AM conda WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:38:30 AM firefox WINSTAT-222 Started PRIMO\vachuska 4
10/23/26 02:38:15 AM conhost SILO-230 Ended PRIMO\mlsmith48 6 62
10/23/26 02:38:15 AM cmd SILO-230 Ended PRIMO\mlsmith48 6 47
10/23/26 02:38:15 AM Bginfo64 SILO-230 Ended PRIMO\mlsmith48 6 94
10/23/26 02:38:14 AM Bginfo64 SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:14 AM powershell SILO-230 Ended PRIMO\mlsmith48 6 719
10/23/26 02:38:13 AM firefox WINSTAT-222 Ended PRIMO\vachuska 4 62
10/23/26 02:38:12 AM powershell SILO-230 Ended PRIMO\mlsmith48 6 406
10/23/26 02:38:12 AM powershell SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:12 AM powershell SILO-230 Ended PRIMO\mlsmith48 6 391
10/23/26 02:38:12 AM powershell SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:11 AM wscript SILO-230 Ended PRIMO\mlsmith48 6 47
10/23/26 02:38:11 AM conhost SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:11 AM cmd SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:11 AM powershell SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:38:11 AM wscript SILO-230 Started PRIMO\mlsmith48 6
10/23/26 02:37:58 AM python WINSTAT-220 Ended PRIMO\sguo88 3 1109
10/23/26 02:37:58 AM conda WINSTAT-220 Ended PRIMO\sguo88 3 16
10/23/26 02:37:58 AM conhost WINSTAT-220 Ended PRIMO\sguo88 3 31
10/23/26 02:37:57 AM python WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:37:57 AM conda WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:37:57 AM conhost WINSTAT-220 Started PRIMO\sguo88 3
10/23/26 02:37:43 AM backgroundTaskHost WINSTAT-201 Ended PRIMO\drhansen3 3 78
10/23/26 02:37:43 AM backgroundTaskHost WINSTAT-201 Started PRIMO\drhansen3 3
10/23/26 02:37:41 AM firefox WINSTAT-222 Started PRIMO\vachuska 4
10/23/26 02:37:14 AM csc WINSTAT-S209 Ended PRIMO\jagibson2 6 78
10/23/26 02:37:14 AM cvtres WINSTAT-S209 Ended PRIMO\jagibson2 6 31
10/23/26 02:37:14 AM svchost WINSTAT-S209 Ended PRIMO\jagibson2 6 125
10/23/26 02:37:14 AM RuntimeBroker WINSTAT-S209 Ended PRIMO\jagibson2 6 6734
10/23/26 02:37:14 AM RuntimeBroker WINSTAT-S209 Ended PRIMO\jagibson2 6 328
10/23/26 02:37:14 AM svchost WINSTAT-S209 Ended PRIMO\jagibson2 6 297
10/23/26 02:37:14 AM gpscript WINSTAT-S209 Ended PRIMO\jagibson2 6 16
10/23/26 02:37:14 AM powershell WINSTAT-S209 Ended PRIMO\jagibson2 6 250
10/23/26 02:37:14 AM conhost WINSTAT-S209 Ended PRIMO\jagibson2 6 31
10/23/26 02:37:14 AM WINSTAT-S209 SessionLogoff 6
10/23/26 02:37:13 AM csc WINSTAT-S209 Started PRIMO\jagibson2 6
10/23/26 02:37:13 AM cvtres WINSTAT-S209 Started PRIMO\jagibson2 6
10/23/26 02:37:13 AM taskhostw WINSTAT-S209 Ended PRIMO\jagibson2 6 141
10/23/26 02:37:13 AM gpscript WINSTAT-S209 Started PRIMO\jagibson2 6
10/23/26 02:37:13 AM powershell WINSTAT-S209 Started PRIMO\jagibson2 6
10/23/26 02:37:13 AM conhost WINSTAT-S209 Started PRIMO\jagibson2 6
10/23/26 02:37:13 AM sihost WINSTAT-S209 Ended PRIMO\jagibson2 6 797
10/23/26 02:37:13 AM RuntimeBroker WINSTAT-S209 Ended PRIMO\jagibson2 6 4625
10/23/26 02:37:13 AM WfShell WINSTAT-S209 Ended PRIMO\jagibson2 6 359
10/23/26 02:37:13 AM ShellExperienceHost WINSTAT-S209 Ended PRIMO\jagibson2 6 625
10/23/26 02:37:13 AM ctfmon WINSTAT-S209 Ended PRIMO\jagibson2 6 422
10/23/26 02:37:13 AM explorer WINSTAT-S209 Ended PRIMO\jagibson2 6 11125
10/23/26 02:37:13 AM SearchUI WINSTAT-S209 Ended PRIMO\jagibson2 6 2891
10/23/26 02:37:11 AM CtxGfx WINSTAT-S209 Ended PRIMO\jagibson2 6 6484
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 19906
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 15078
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 188
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 16844
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 22062
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 438
10/23/26 02:37:11 AM msedge WINSTAT-S209 Ended PRIMO\jagibson2 6 39625
696 million total events