Windows EventInformation
Windows Event ID 4608 – Security: Windows System Startup Initialization
Event ID 4608 logs when Windows starts up and the Local Security Authority Subsystem Service (LSASS.EXE) initializes the auditing subsystem during system boot.
