Log файл windows. Event properties - event 1, wmi-activity general details в макрософт. query filter event logs security system. securehero file system auditor install. event viewer windows 7 посмотреть logon и logoff.