---

$boot = (Get-CimInstance Win32_OperatingSystem).LastBootUpTime

Get-WinEvent -FilterHashtable @{
    LogName='System'
    StartTime=$boot
} |
Where-Object {
    $_.Id -in 7000,7009,7031 -and
    $_.Message -match 'ViPNet|vipnetswagent|Iplir'
} |
Select TimeCreated,Id,Message |
Format-List