This Is Strange

[itman 1,659]

Just performed latest Win 10 1809 cumulative update earlier this afternoon.

Signed off the PC at approx. 5:30 PM. Signed back on the PC at 6:29 PM. Checked my Eset Event log and it showed a definition update at 6:21 PM. I can't see how that is possible since I, the only account set up on the PC, was signed off. Checked the Win Event logs and no other logon or logoff activity shown during this time period.

Edited April 9, 2019 by itman

[Marcos 5,070]

Ekrn runs in the local system account so it doesn't require a user to be logged in in order to perform updates.

[itman 1,659]

12 hours ago, Marcos said:

Ekrn runs in the local system account so it doesn't require a user to be logged in in order to perform updates.

Dawned on me later, this was the case. Never observed it previously since PC had entered sleep mode prior to a signature update occurring.