In my IT professional life I came across lots of situations where
I have to check the user’s activities on their computer for security purpose. Here I would like to
share an interesting tool from Nirsoft which you can use for this purpose.
LastActivityView is a tool for Windows operating system that collects information from various sources on a running system, and displays a log of actions made by the user and events occurred on this computer. The program sorts the activities by time by default. Each table row displays the time the event occurred, the description which usually provides you with information about the type of event, file names and paths if available, and more information which offers miscellaneous information if available.
The program catches a variety of activities that include Running
.exe file, Opening open/save dialog-box, Opening file/folder from Explorer or
other software, software installation, system shutdown/start, application or
system crash, network connection/disconnection and more...
It doesn't require any installation process or additional
dll files. In order to start using it, download it from the official Nirsoft (http://www.nirsoft.net/utils/computer_activity_view.html) website and unpack it on your system once the download has completed. Then simply run the executable file - LastActivityView.exe.
After you run LastActivityView, it scans your computer and
displays all actions and events found on your system.
You can select one or more items and then save
them into xml/html/csv/tab-delimited file (Ctrl+S) or copy them to the
clipboard (Ctrl+C), and then paste the data to Excel or other software.