LastActivityView

LastActivityView is a utility developed by NirSoft that collects and displays the history of activities performed on a Windows computer. The program extracts information from various sources within the operating system to provide a detailed timeline of events and actions. The data can be filtered by date, event type, or specific keywords.

★★★★★

5.0(1 ratings)

• Shutdown/Startup Event Log. Monitors the exact times the computer was turned on, shut down, or restarted. The function captures the timestamps of these events from the Windows registry and displays them with second-level precision. It includes information on whether the shutdown was normal or forced.
• Application Execution Tracking. Records each instance of executable program launches. The tool identifies the full path of the executed file, the start time, and the user who initiated the process. It maintains a history even for applications launched from the command line.
• File Access Monitoring. Captures document opening operations within system applications. The function tracks access to various file formats when opened through registered application associations. It records the full document path and the access time.
• Software Installation Detector. Identifies program installation and uninstallation events. It gathers information on packages installed using standard Windows installers. Displays the product name, version, publisher, and installation date.
• Network Connection Log. Monitors the establishment of successful network connections. The function captures connection events to network shares and remote servers. It records the IP address or name of the accessed resource.
• System Lock Events. Detects when the computer enters a locked or suspended state. The tool records the moments when the user locks the workstation or the system activates the screen saver. Includes duration information for low-power states.
• System Update History. Collects information on Windows Update installations. The function displays the update identifier, installation date, and patch description. Maintains a record of both security and optional updates.
• Configuration Change Events. Detects modifications to critical system configurations. Records alterations to group policies, registry settings, and system configuration parameters. Provides information on the previous and new values.
• Printing Activity. Monitors jobs sent to local and network printers. The function captures the document name, printer used, number of pages, and printing time. Maintains a history of all processed jobs.
• System Error Events. Collects incidents of application crashes and unexpected closures. The tool records error messages, involved applications, and the exact timestamp of failures. Includes information on modules that caused exceptions.

LastActivityView was developed by Nir Sofer, founder of NirSoft. The project began in 2009 as a complementary utility for the suite's password recovery tools. The program is written primarily in C++ with assembly language components for low-level optimizations. The first public version was released in January 2010 after several months of internal development.

Alternatives to LastActivityView:

SoftDetective

SoftDetective is a software utility that monitors programs running on the computer and displays the changes they make to files, folders, and Windows Registry settings.

Price: Free   Size: 1.35 MB   Version: 22.7   OS: Windows