Windows EventInformation
Windows Event ID 4109 – Microsoft-Windows-Wininit: User Logoff Notification
Event ID 4109 records user logoff events initiated by the Windows initialization process, providing audit trail for session termination and system security monitoring.