Process mining can be used to extract healthcare processes related information from event logs by performing analysis exploiting the information recorded in it. We report a process mining analysis made to an event log containing traces on user activity recorded by a Virtual Electronic Patient Record (VEPR) system of a Central Hospital. A set of technical analyses were performed. Results from the discovery and characterization of global behavior and from a time series analysis on observed user tasks are reported. Process mining was applied successfully to discover, characterize and analyze user behavior recorded from VEPR. Worth noting the execution of tasks profile observed after log out, revealing significant security problems.