Determine when a Windows machine was rebooted through the Event Log
Filter the System event log with Events 6005 and 6006.

6005: The Event Log was started.
6006: The Event Log was stopped.
6005: The Event Log was started.
6006: The Event Log was stopped.
No comments