My daily report (you must enable process scnannig):
Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetUnique,
tsysOS.OSname,
tblAssets.Domain,
tblAssets.Username,
tblADusers.Displayname,
tblADusers.Department,
tblADusers.Title,
tblADusers.Company,
tblProcesses.ExecutablePath,
tblProcesses.Caption,
tblProcesses.Lastchanged
From tblAssets
Inner Join tblProcesses On tblAssets.AssetID = tblProcesses.AssetID And
(Lower(tblProcesses.Caption) In ('sol.exe', 'mlines24.exe', 'hwd3.exe',
'bs4.exe', 'elka.exe', 'lines.exe', 'king3.exe', 'click.exe',
'mosaic.exe', 'durbetsel.exe', 'cards.exe', 'semechki.exe',
'nardy20.exe') Or Lower(tblProcesses.ExecutablePath) Like '%cradle%' Or
Lower(tblProcesses.ExecutablePath) Like N'%шар%' Or
Lower(tblProcesses.ExecutablePath) Like N'%дурак%' Or
Lower(tblProcesses.ExecutablePath) Like N'%кубик%' Or
Lower(tblProcesses.ExecutablePath) Like N'%пазл%' Or
Lower(tblProcesses.ExecutablePath) Like N'%косынк%' Or
Lower(tblProcesses.ExecutablePath) Like N'%кинг%' Or
Lower(tblProcesses.ExecutablePath) Like N'%преферанс%' Or
Lower(tblProcesses.ExecutablePath) Like N'%маджонг%' Or
Lower(tblProcesses.ExecutablePath) Like '%mahjon%' Or
Lower(tblProcesses.ExecutablePath) Like '%uzzl%' Or
Lower(tblProcesses.ExecutablePath) Like '%cubes%' Or
Lower(tblProcesses.ExecutablePath) Like '%pinball%' Or
Lower(tblProcesses.ExecutablePath) Like '%fight%' Or
Lower(tblProcesses.ExecutablePath) Like '%chicken%' Or
Lower(tblProcesses.ExecutablePath) Like '%blocks%' Or
Lower(tblProcesses.ExecutablePath) Like '%1000.exe' Or
Lower(tblProcesses.ExecutablePath) Like '%durak.exe' Or
Lower(tblProcesses.ExecutablePath) Like '%toydef%' Or
Lower(tblProcesses.ExecutablePath) Like '%bugs%' Or
Lower(tblProcesses.ExecutablePath) Like '%desyatka%' Or
Lower(tblProcesses.ExecutablePath) Like '%tetris%' Or
Lower(tblProcesses.ExecutablePath) Like '%balls%' Or
Lower(tblProcesses.ExecutablePath) Like '%domino%' Or
Lower(tblProcesses.ExecutablePath) Like '%craft%' Or
Lower(tblProcesses.ExecutablePath) Like '%marriage%' Or
Lower(tblProcesses.ExecutablePath) Like '%kyodai%' Or
Lower(tblProcesses.ExecutablePath) Like '%hearts%' Or
Lower(tblProcesses.ExecutablePath) Like N'%игр%' Or
Lower(tblProcesses.ExecutablePath) Like '%game%' Or
Lower(tblProcesses.ExecutablePath) Like '%alawar%' Or
Lower(tblProcesses.ExecutablePath) Like '%farm%' Or
Lower(tblProcesses.ExecutablePath) Like '%moorhuhn%' Or
Lower(tblProcesses.ExecutablePath) Like '%happy%' Or
Lower(tblProcesses.ExecutablePath) Like '%zuma%' Or
Lower(tblProcesses.ExecutablePath) Like 'spider%' Or
Lower(tblProcesses.ExecutablePath) Like '%solitaire%' Or
Lower(tblProcesses.ExecutablePath) Like '%monopoly%' Or
Lower(tblProcesses.ExecutablePath) Like '%tanks%' Or
Lower(tblProcesses.ExecutablePath) Like '%tanki%' Or
Lower(tblProcesses.ExecutablePath) Like '%yeti%' Or
Lower(tblProcesses.ExecutablePath) Like '%craft%' Or
Lower(tblProcesses.ExecutablePath) Like '%lineage%' Or
Lower(tblProcesses.ExecutablePath) Like '%prince%' Or
Lower(tblProcesses.ExecutablePath) Like N'%янс%' Or
Lower(tblProcesses.ExecutablePath) Like 'N%уголки%')
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode And
tblAssets.OScode Not Like '%s'
Left Join tblADusers On tblADusers.Username = tblAssets.Username And
tblADusers.Userdomain = tblAssets.Domain
Where tblProcesses.Lastchanged > GetDate() - 1