Event ID - 512

Event Id512
DescriptionWindows NT is starting up.
Event InformationAccording to Microsoft :
Cause :
The Local Security Authority logs this event when the auditing system is initialized. This event corresponds to a Security 513 event. This event is logged for informational purposes only.
Resolution :
No user action is required.


This event record indicates that the system has been restarted. This typically means that the system was powered off or stopped, rather than being shut down gracefully.
Reference LinksEvent ID 512 from Source Security

The User Logoff Event ID 538 Is Not Logged to the Security Event Log When You Shut Down Your Computer and Then Restart It

Alternate Event ID in Vista and Windows Server 2008 is 4608.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.