Windows EventInformation
Windows Event ID 4609 – Security: Windows is Starting Up
Event ID 4609 records when Windows begins its startup process. This security audit event fires during system boot and provides critical timing information for security monitoring and forensic analysis.