Winstat Reports

Please choose a report to run
Calendar Calendar

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

 

Export to Excel

Last 75 events

Time Name Machine Desc User Sess CPU
09/30/26 08:37:12 PM python WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:37:12 PM cmd WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:37:12 PM conda WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:37:12 PM conhost WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:58 PM tasklist WINSTAT-222 Ended PRIMO\elee73 9 47
09/30/26 08:36:58 PM conhost WINSTAT-222 Ended PRIMO\elee73 9 31
09/30/26 08:36:58 PM firefox WINSTAT-222 Ended PRIMO\elee73 9 62
09/30/26 08:36:58 PM tasklist WINSTAT-222 Started PRIMO\elee73 9
09/30/26 08:36:58 PM conhost WINSTAT-222 Started PRIMO\elee73 9
09/30/26 08:36:57 PM conhost WINSTAT-222 Ended PRIMO\elee73 9 31
09/30/26 08:36:57 PM tasklist WINSTAT-222 Ended PRIMO\elee73 9 78
09/30/26 08:36:57 PM conhost WINSTAT-222 Started PRIMO\elee73 9
09/30/26 08:36:57 PM tasklist WINSTAT-222 Started PRIMO\elee73 9
09/30/26 08:36:47 PM scrnsave.scr SILO-232 Ended PRIMO\schakrabor47 19 16
09/30/26 08:36:47 PM LogonUI SILO-232 Started NT AUTHORITY\system 19
09/30/26 08:36:47 PM SILO-232 SessionLock PRIMO\schakrabor47 19
09/30/26 08:36:45 PM splwow64 WINSTAT-221 Ended PRIMO\jldykema 3 31
09/30/26 08:36:42 PM scrnsave.scr SILO-232 Started PRIMO\schakrabor47 19
09/30/26 08:36:35 PM curl WINSTAT-213 Started PRIMO\guelermanram 5
09/30/26 08:36:35 PM sessionmsg WINSTAT-222 Started PRIMO\crellsworth 6
09/30/26 08:36:26 PM firefox WINSTAT-222 Started PRIMO\elee73 9
09/30/26 08:36:24 PM cmd WINSTAT-220 Ended PRIMO\ji53 3 31
09/30/26 08:36:24 PM conda WINSTAT-220 Ended PRIMO\ji53 3 31
09/30/26 08:36:24 PM python WINSTAT-220 Ended PRIMO\ji53 3 1203
09/30/26 08:36:24 PM conhost WINSTAT-220 Ended PRIMO\ji53 3 47
09/30/26 08:36:22 PM conda WINSTAT-220 Started PRIMO\ji53 3
09/30/26 08:36:22 PM python WINSTAT-220 Started PRIMO\ji53 3
09/30/26 08:36:22 PM conhost WINSTAT-220 Started PRIMO\ji53 3
09/30/26 08:36:22 PM cmd WINSTAT-220 Started PRIMO\ji53 3
09/30/26 08:36:20 PM RuntimeBroker WINSTAT-221 Ended PRIMO\jldykema 3 31
09/30/26 08:36:15 PM conhost WINSTAT-214 Ended PRIMO\sguo88 7 62
09/30/26 08:36:15 PM python WINSTAT-214 Ended PRIMO\sguo88 7 31
09/30/26 08:36:15 PM conhost WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:14 PM cmd WINSTAT-214 Ended PRIMO\sguo88 7 47
09/30/26 08:36:14 PM python WINSTAT-214 Ended PRIMO\sguo88 7 1906
09/30/26 08:36:14 PM conhost WINSTAT-214 Ended PRIMO\sguo88 7 31
09/30/26 08:36:14 PM conda WINSTAT-214 Ended PRIMO\sguo88 7 31
09/30/26 08:36:14 PM python WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:12 PM python WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:12 PM conhost WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:12 PM conda WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:12 PM cmd WINSTAT-214 Started PRIMO\sguo88 7
09/30/26 08:36:10 PM conhost SILO-226 Ended PRIMO\skim2247 36 62
09/30/26 08:36:10 PM cmd SILO-226 Ended PRIMO\skim2247 36 16
09/30/26 08:36:10 PM Bginfo64 SILO-226 Ended PRIMO\skim2247 36 188
09/30/26 08:36:10 PM Bginfo64 SILO-226 Started PRIMO\skim2247 36
09/30/26 08:36:10 PM powershell SILO-226 Ended PRIMO\skim2247 36 766
09/30/26 08:36:08 PM powershell SILO-226 Ended PRIMO\skim2247 36 359
09/30/26 08:36:08 PM powershell SILO-226 Started PRIMO\skim2247 36
09/30/26 08:36:07 PM conhost SILO-226 Started PRIMO\skim2247 36
09/30/26 08:36:07 PM powershell SILO-226 Started PRIMO\skim2247 36
09/30/26 08:36:06 PM cmd SILO-226 Started PRIMO\skim2247 36
09/30/26 08:35:44 PM msedge WINSTAT-212 Ended PRIMO\szeng47 3 422
09/30/26 08:35:44 PM msedge WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:40 PM backgroundTaskHost WINSTAT-221 Ended PRIMO\jldykema 3 109
09/30/26 08:35:40 PM backgroundTaskHost WINSTAT-221 Started PRIMO\jldykema 3
09/30/26 08:35:40 PM RuntimeBroker WINSTAT-221 Started PRIMO\jldykema 3
09/30/26 08:35:37 PM conhost WINSTAT-212 Ended PRIMO\szeng47 3 94
09/30/26 08:35:37 PM cmd WINSTAT-212 Ended PRIMO\szeng47 3 172
09/30/26 08:35:37 PM Bginfo64 WINSTAT-212 Ended PRIMO\szeng47 3 156
09/30/26 08:35:36 PM conhost WINSTAT-212 Ended PRIMO\szeng47 3 62
09/30/26 08:35:33 PM powershell WINSTAT-212 Ended PRIMO\szeng47 3 1172
09/30/26 08:35:33 PM Bginfo64 WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:32 PM TSTheme WINSTAT-212 Ended PRIMO\szeng47 3 16
09/30/26 08:35:32 PM powershell WINSTAT-212 Ended PRIMO\szeng47 3 1297
09/30/26 08:35:30 PM powershell WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:30 PM quser WINSTAT-212 Ended PRIMO\szeng47 3 78
09/30/26 08:35:30 PM quser WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:29 PM powershell WINSTAT-212 Ended PRIMO\szeng47 3 703
09/30/26 08:35:29 PM quser WINSTAT-212 Ended PRIMO\szeng47 3 16
09/30/26 08:35:29 PM powershell WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:29 PM powershell WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:29 PM quser WINSTAT-212 Started PRIMO\szeng47 3
09/30/26 08:35:28 PM wscript WINSTAT-212 Ended PRIMO\szeng47 3 203
09/30/26 08:35:28 PM LogonUI WINSTAT-212 Ended NT AUTHORITY\system 3 625
691 million total events