Log which track when a PC is unlocked?

My client is reporting that perhaps after locking (ctrl+alt+del) his PC at night it seems someone (or an application is running) which unlocks his PC. He is asking if there is some form of a log or a way to detect this. Any help would be greatly appreciated. Thanks in advance.