System Restart event logs
| Evennt ID | Description |
|---|---|
| 1074 | Displays who initiated the restart, if windows update has initiated restart |
| 1076 | Reason for last shutdown |
| 41 | if system was rebooted or shutdown unexpectedly |
| 6006 | The event log service was stopped.” This happens during shutdown |
| 6005 | The event log service was started.” This happens during startup |
| 6008 | Gets logged if previous shutdown was unexpected |
| 6013 | Shows system Uptime |