Export to Excel
| Time | Name | Machine | Desc | User | Sess | CPU |
|---|---|---|---|---|---|---|
| 11/10/26 09:35:36 PM | sessionmsg | WINSTAT-214 | Started | PRIMO\owilkinson | 5 | |
| 11/10/26 09:35:33 PM | git | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 94 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 78 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 78 |
| 11/10/26 09:35:33 PM | Bginfo64 | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 438 |
| 11/10/26 09:35:33 PM | cmd | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 172 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 47 |
| 11/10/26 09:35:33 PM | git | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 78 |
| 11/10/26 09:35:33 PM | git | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:33 PM | Bginfo64 | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 547 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 94 |
| 11/10/26 09:35:33 PM | cmd | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 141 |
| 11/10/26 09:35:33 PM | powershell | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 422 |
| 11/10/26 09:35:33 PM | csc | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 62 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 31 |
| 11/10/26 09:35:33 PM | svchost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 281 |
| 11/10/26 09:35:33 PM | gpscript | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 47 |
| 11/10/26 09:35:33 PM | svchost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 94 |
| 11/10/26 09:35:33 PM | cvtres | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 16 |
| 11/10/26 09:35:33 PM | RuntimeBroker | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 453 |
| 11/10/26 09:35:33 PM | RuntimeBroker | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 4938 |
| 11/10/26 09:35:33 PM | conhost | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:33 PM | git | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:33 PM | WINSTAT-S208 | SessionLogoff | 25 | |||
| 11/10/26 09:35:32 PM | csc | WINSTAT-S208 | Started | PRIMO\karpinski | 25 | |
| 11/10/26 09:35:32 PM | cvtres | WINSTAT-S208 | Started | PRIMO\karpinski | 25 | |
| 11/10/26 09:35:32 PM | git | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 62 |
| 11/10/26 09:35:32 PM | conhost | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 62 |
| 11/10/26 09:35:32 PM | git | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 94 |
| 11/10/26 09:35:32 PM | conhost | WINSTAT-S208 | Started | PRIMO\karpinski | 25 | |
| 11/10/26 09:35:32 PM | git | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:32 PM | conhost | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:32 PM | git | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:32 PM | powershell | WINSTAT-S208 | Started | PRIMO\karpinski | 25 | |
| 11/10/26 09:35:32 PM | gpscript | WINSTAT-S208 | Started | PRIMO\karpinski | 25 | |
| 11/10/26 09:35:31 PM | sihost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 656 |
| 11/10/26 09:35:31 PM | ctfmon | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 172 |
| 11/10/26 09:35:31 PM | SearchUI | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 4156 |
| 11/10/26 09:35:31 PM | explorer | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 12016 |
| 11/10/26 09:35:31 PM | taskhostw | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 62 |
| 11/10/26 09:35:31 PM | RuntimeBroker | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 1109 |
| 11/10/26 09:35:31 PM | WfShell | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 547 |
| 11/10/26 09:35:31 PM | ShellExperienceHost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 1812 |
| 11/10/26 09:35:30 PM | powershell | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 1234 |
| 11/10/26 09:35:30 PM | Bginfo64 | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:30 PM | Bginfo64 | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:29 PM | TSTheme | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 78 |
| 11/10/26 09:35:28 PM | powershell | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 703 |
| 11/10/26 09:35:28 PM | powershell | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:28 PM | firefox | WINSTAT-207 | Started | PRIMO\xhu344 | 6 | |
| 11/10/26 09:35:27 PM | powershell | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 703 |
| 11/10/26 09:35:27 PM | powershell | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:26 PM | conhost | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 62 |
| 11/10/26 09:35:26 PM | python | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 47 |
| 11/10/26 09:35:26 PM | wscript | WINSTAT-214 | Ended | PRIMO\szeng47 | 7 | 219 |
| 11/10/26 09:35:26 PM | conhost | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:26 PM | python | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 2125 |
| 11/10/26 09:35:26 PM | cmd | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 62 |
| 11/10/26 09:35:26 PM | conda | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 78 |
| 11/10/26 09:35:26 PM | conhost | WINSTAT-207 | Ended | PRIMO\sguo88 | 8 | 78 |
| 11/10/26 09:35:26 PM | conhost | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:26 PM | python | WINSTAT-207 | Started | PRIMO\sguo88 | 8 | |
| 11/10/26 09:35:26 PM | powershell | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:25 PM | LogonUI | WINSTAT-214 | Ended | NT AUTHORITY\system | 7 | 703 |
| 11/10/26 09:35:25 PM | wscript | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:25 PM | cmd | WINSTAT-214 | Started | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:25 PM | CtxGfx | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 1078 |
| 11/10/26 09:35:25 PM | CtxMtHost | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 62 |
| 11/10/26 09:35:25 PM | 192.168.0.127 | WINSTAT-214 | SessionUnlock | PRIMO\szeng47 | 7 | |
| 11/10/26 09:35:25 PM | icak2meng | WINSTAT-S208 | Ended | NT AUTHORITY\system | 25 | 16 |
| 11/10/26 09:35:25 PM | rstudio | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 344 |
| 11/10/26 09:35:25 PM | rstudio | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 4203 |
| 11/10/26 09:35:25 PM | SCNotification | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 266 |
| 11/10/26 09:35:25 PM | rstudio | WINSTAT-S208 | Ended | PRIMO\karpinski | 25 | 27984 |
| 699 million total events | ||||||