GIST – Find Windows Eventlog Shutdown Events


  • Share on Pinterest
Get-WinEvent -FilterHashtable @{logname = 'System'; id = 1074, 6005, 6006, 6008} -MaxEvents 6 | Format-Table -wrap