How to identify Unauthorized access from event log?

I had left my laptop in college lab after locking it. Not sure if I had left it in sleep mode.

Today when I checked the event log has an entry at a time I wasn't there!The system has returned from a low power state. I left the lab at 12:30. Log has an entry in power troubleshooter at 12:32.

Will there be such an entry even when someone just press some key?

Or was there a successful logon attempt?

Please let me know.

Check security logs. It could be, that Windows was performing some maintenance.

I checked the security log.


There is a special logon at 12:31:57

PC woke up at 12:32

But there are far more entries of special logon. No entry at same timestamp in Return from sleep mode.

So this one entry looks a bit suspicious to me