Get Last Reboot or Shutdown Through Powershell (via Event Logs)

Easy little one-liner here, if you want a list of shutdown or reboot reasons, you can run this one-liner in Powershell or your favorite RMM.

Get-EventLog -logname system | Where-Object {$_.EventID -eq 1074 -or $_EventID -eq 6008}

Leave a Reply

Your email address will not be published. Required fields are marked *