Windows Event ID 6008: System was shutdown unexpectedly.

Description	The event is logged when the previous shutdown was unexpected, and is displayed when the system starts again.
Category	Event log
Subcategory	Startup/Shutdown

ADAudit Plus provides real time alerts and detailed reports when the system shuts down unexpectedly.
These reports contain details like time of shutdown and possible reasons for shutdown.

Event 6008 applies to the following operating systems:

Event 4670 applies to the following operating systems:

Detect Event ID 6008 unexpected system shutdown events and respond quickly to potential hardware failures or malicious forced restarts with ADAudit Plus.