| ID | Event Description |
|---|---|
| 4608 | Windows is starting up Audit Success, PCI-DSS |
| 4609 | Windows is shutting down |
| 4616 | The system time was changed Audit Success |
| 4621 | Administrator recovered system from CrashOnAuditFail. Audit Success, NIST SP 800-53, NIST 800-171, CMMC L2 |