Simple tool for Windows Vista/7/8/2008 that analyses the security event log of Windows WinLogOnView also allows you to easily export the logon sessions path of the event log (Usually located under C:\Windows\System32\winevt\Logs) .