Question Software for monitoring in a simple way Windows 11 activities

[Keldrilh]

Hello,

I would like to ask if is there out there a software with the following 3 function:

1) Recording the date and time for any USB connected/disconnected from the laptop

2) Recording everytime a new software is installed


3) Recording everytime there is a login (and logout) in the Microsoft account on the laptop

If a software with these 3 functions doesn't exist, it would be great if you can tell me the name for a reliable software which has at least one of those 3 function. So even if it will be about getting 3 different softwares, it would be ok.

Thanks in advance for your answer,

 

[Ralston18]

I suggest taking a look in both Reliability History/Monitor and Event Viewer to determine if the required information is being captured in either one or both tools.

Event Viewer being the most likely source for all of the details/history.

Event Viewer requires some time and effort to navigate and understand.

To help:

How To - How to use Windows 10 Event Viewer | Tom's Hardware Forum (tomshardware.com)

= = = =

If so then you may be able to capture the specific entries directly or use some code of your own to cull out the desired information/data.

Powershell a likely candidate via a couple of "Get-" cmdlets. But other software (e.g., Python, Java) could be used.

Try Control Panel > All Control Panel Items > Windows Tools.

Get a sense of what the various tools do and the specific information that they present.

FYI as a "starter" link.

https://www.thetechedvocate.org/ways-to-view-the-usb-device-history-in-windows/

From the link:

"Get-PnpDevice -Class “USB” | Format-List -Property * This will show you a list of all the USB devices connected to your computer, along with details like the device ID and driver version."

Try the

Get-PnpDevice -Class “USB” | Format-List -Property * via Powershell as Admin.

Also try:

Get-appxpackage

Neither cmdlet captures dates & times but does serve as a means to demonstrate how Powershell can be used.

Key is to find and present the required information - if that is indeed being captured and stored in some history.

 

[Keldrilh]

I suggest taking a look in both Reliability History/Monitor and Event Viewer to determine if the required information is being captured in either one or both tools.

Event Viewer being the most likely source for all of the details/history.

Event Viewer requires some time and effort to navigate and understand.

To help:

How To - How to use Windows 10 Event Viewer | Tom's Hardware Forum (tomshardware.com)

= = = =

If so then you may be able to capture the specific entries directly or use some code of your own to cull out the desired information/data.

Powershell a likely candidate via a couple of "Get-" cmdlets. But other software (e.g., Python, Java) could be used.

Try Control Panel > All Control Panel Items > Windows Tools.

Get a sense of what the various tools do and the specific information that they present.

FYI as a "starter" link.

https://www.thetechedvocate.org/ways-to-view-the-usb-device-history-in-windows/

From the link:

"Get-PnpDevice -Class “USB” | Format-List -Property * This will show you a list of all the USB devices connected to your computer, along with details like the device ID and driver version."

Try the

Get-PnpDevice -Class “USB” | Format-List -Property * via Powershell as Admin.

Also try:

Get-appxpackage

Neither cmdlet captures dates & times but does serve as a means to demonstrate how Powershell can be used.

Key is to find and present the required information - if that is indeed being captured and stored in some history.

Thanks for your reply Ralston.

It's very detailed, and I appreciate it l.

But unfortunately I'm not very skilled about PC. I'm not familiar with that commands that you wrote. I also knew by a Google search about the Event Viewer, but for me it's like try to read a book written in another language that I don't speak.

That's why I hoped to find a software that can provide that information that I need, in a easy way, in a language that I understand.

Last night I stepped on a software that gives that information. It's called spyrix keylogger. It's a free software. Any chance you know anything about it? Would you say it's safe to install that one?

 

[ex_bubblehead]

Why not simply learn to use what's already there rather than adding yet another layer of complexity? At some point you're going to have to learn how to use/service your system anyway.

 

[Ralston18]

Seconding @ex_bubblehead

Take the time to work with and to learn the built in tools provided by Windows/Microsoft. E.g. Event Viewer.

There is no rush and you will learn as you go. Remember "Cancel" is your friend and just simply back out of anything that seems to be going astray or otherwise makes you uncomfortable. Take a step back, reconsider, and try again.

Start with Event Viewer > Windows Logs > Application.

FYI via Microsoft:

https://learn.microsoft.com/en-us/windows/win32/msi/event-logging

Look at Event ID 11707

Then create a Custom View for that Event.

= = = =

And there is a Powershell "Get" that applies to the Event Logs. Not a cmdlet that I have really worked with (full disclosure) however very likely can be used to provide the data you require.