Audit_RebootMessages

List Power Events, reason and user from Event Log

Audit_RebootMessages

This component list Date, Action, Reason, and User for all power events (1074) found in the event viewer.

Technical Info

This component use Get-Winevent to pull all records from the System event log with id of 1074. It then parses the XML from each event outputting the Date, Action, Reason, and User.

Required Variables or UDFs

Level	Name	Value	Notes
			No Variables required for this component

Security Checks

If this component downloads any external files other then grabbing the script from our repository, they will be listed here so you can do your own due diligence if needed.

Filename	URL	Path	Notes
			No external downloads for this component

Changelog

12/14/2022 – Initial Release

11/24/2023 – Updated to v4 launcher