Загрузка данных

$boot = (Get-CimInstance Win32_OperatingSystem).LastBootUpTime

Get-WinEvent -FilterHashtable @{
    LogName='System'
    StartTime=$boot
} -ErrorAction SilentlyContinue |
Where-Object {
    $_.Id -in 7000,7009,7031,7034
} |
Select-Object TimeCreated,Id,ProviderName,Message |
Format-List