Here are the three commands to extract Even logs using PowerShell. Using Get-WinEvent Using Get-EventLog Using wevtutil for Raw EVTX Logs You can run these commands on PowerShell or Windows Terminal.
This step-by-step guide will help you find out who restarted your Windows Server. You can find the user or application that shut down or restarted your Windows Server. This information can be found ...