Logging login events on my Windows 7 desktop OS to a file

1

I suspect someone is login into my computer when I check event viewer. Is it possible to have a script on windows 7 to record every login onto my windows 7 desktop pc?

user221459

Posted 2015-05-22T13:47:18.893

Reputation: 11

Answers

2

Windows already can do this using the MMC module. But if you do not trust it, you can add an autorun to your profiles that does this 'logging'

LvB

Posted 2015-05-22T13:47:18.893

Reputation: 149

0

Windows already logs this into the security log

There is a nice freeware GUI: NirSofts's WinLogOnView

StackzOfZtuff

Posted 2015-05-22T13:47:18.893

Reputation: 1 185

why use a 3rd party app when the MMC enables you to see this already? – LvB – 2015-05-22T14:06:10.700

Because the security log has too much throughput. It is unreadable to me. Even on my single user machine. There are currently 21k events. (~20MB) WinLogonView parses this into just 105 sessions. And it also calculates session duration. (Which eventvwr.msc does not, I think.) – StackzOfZtuff – 2015-05-22T14:22:22.703

Learn to use the filters, instead of relying on external tools that you have no knowledge about how it works , or what data it sends to 3rd party (or worse what security holes it opens) – LvB – 2015-05-22T14:23:32.137

Sure. But the VirusTotal report of my WinLogonView.exe is clean. And NirSoft has been around for long enough for me to trust them. Worth the risk to me.

– StackzOfZtuff – 2015-05-22T14:26:15.363