#system-shutdown

Windows Event ID 10001 – WinInit: System Shutdown Initiated by User

Event ID 10001 from WinInit indicates a system shutdown was initiated by a user or process. This informational event logs shutdown requests and helps track system restart patterns.

Windows Event ID 6006 – EventLog: Event Log Service Stopped

Event ID 6006 indicates the Windows Event Log service has stopped. This informational event fires during normal system shutdown or when the EventLog service is manually stopped.