Windows' Event ID 6008
is Unexpected Shutdown
event (see in System's Event Viewer). The problem is that time of the unexpected system's shutdown is written in bytes array (which is called EventData
).
I want to fetch this date (in my C# application) from EventData
but I don't know how time is encoded in bytes array.