查看windows意外关机时间

Get-WinEvent -LogName System -FilterXPath "*[System[(EventID=41 or EventID=6008)]]" | Format-List TimeCreated, Message

wevtutil qe System "/q:*[System[(EventID=41 or EventID=6008)]]" /f:text