Windows 10: Login/Logoff events with the same timestamp

HelloWhen checking on a laptop, I can see multiple login/logoff events with the same timestamp same hour, same minute, same second but a difference of milliseconds.What I was able to saw is that the TargetLogonID is the same, and when checking the PID of the process responsible for the logon/logoff, it leads me to the process lsass responsible for the authentication process.When I try to WIN+L /Lock my screen, this is at the moment I unlock that I am getting the Logon+Logoff events at the same time.So in terms of process responsible etc... no anomaliesCould you please help me understand wh

:)

 

Logoff/Login password prompt

I do not know what to suggest.

I just created a local user account with no password, logged out of my normal user account and selected it for login. This is what was displayed.



I clicked on the SignIn button and went straight through to its Desktop.
I repeated this logout-login procedure in case its first login had been different but this is how it always appeared.

The username of the problem account is not Administrator, is it?

Denis

 

TimeStamp In Security Events

I came across a weird issue of timestamp in security events.

When I am fetching the logs to SIEM system via RPC, the raw event that I see has a field called TimeCreated. The value of this fields looks like epoch time however, when I am converting the timestamp, it doesn't match up with the TimeStamp displayed in the event viewer console.

 

how can time of last login/logoff be displayed upon login?

how can time of last login/logoff be displayed upon login?