Windows EventInformation
Windows Event ID 6 – Kernel-General: System Shutdown Initiated
Event ID 6 from Kernel-General indicates a system shutdown has been initiated. This informational event logs when Windows begins the shutdown process, providing essential audit trail information for system administrators.