---

Get-WinEvent -LogName System -Oldest -MaxEvents 1 |
Select-Object TimeCreated



Get-WinEvent -FilterHashtable @{
    LogName      = 'System'
    ProviderName = 'Microsoft-Windows-Kernel-General'
    Id           = 12
} -MaxEvents 100 |
Select-Object TimeCreated |
Format-Table -AutoSize