| Event Id | 4609 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | Windows is shutting down. |
| Event Information | Cause: This event is logged when windows is shutting down and all logon sessions will be terminated by this shutdown. Resolution : No user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.