System32
Events
Scripts
Codes
GeoIP
Tools
Audit Category
System
(4)
Audit Subcategory
Security State Change
(4)
Operating Systems
Windows 10
(4)
Windows 2008
(4)
Windows 2008 R2
(4)
Windows 2012
(4)
Windows 2012 R2
(4)
Windows 2016
(4)
Windows 2019
(4)
Windows 7
(4)
Windows 8
(4)
Windows 8.1
(4)
Windows Vista
(4)
Tags
ID
Event Description
4608
Windows is starting up
4609
Windows is shutting down
4616
The system time was changed
4621
Administrator recovered system from CrashOnAuditFail.