| Event Id | 512 |
| Source | Security |
| Description | Windows NT is starting up. |
| Event Information | According to Microsoft : Cause : The Local Security Authority logs this event when the auditing system is initialized. This event corresponds to a Security 513 event. This event is logged for informational purposes only. Resolution : No user action is required. ------------------------------------------------------------------------------------------- Cause: This event record indicates that the system has been restarted. This typically means that the system was powered off or stopped, rather than being shut down gracefully. |
| Reference Links | Event ID 512 from Source Security The User Logoff Event ID 538 Is Not Logged to the Security Event Log When You Shut Down Your Computer and Then Restart It Alternate Event ID in Vista and Windows Server 2008 is 4608. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.