Windows EventInformation
Windows Event ID 10001 – WinInit: System Shutdown Initiated by User
Event ID 10001 from WinInit indicates a system shutdown was initiated by a user or process. This informational event logs shutdown requests and helps track system restart patterns.