宇辰的专属空间
Get-WinEvent -LogName System -FilterXPath "*[System[(EventID=41 or EventID=6008)]]" | Format-List TimeCreated, Message
或
wevtutil qe System "/q:*[System[(EventID=41 or EventID=6008)]]" /f:text