Unexpected shutdowns

Last updated on:

About the rule

Rule Type

Standard

Rule Description

A Windows device shuts down unexpectedly.

Severity

Critical

Rule Requirement

Criteria

Action1: actionname = "Unexpected shutdown" select Action1.HOSTNAME,Action1.MESSAGE,Action1.FAULTMODULE

Detection

Execution Mode

realtime

Log Sources

Windows