Fetch date of unexpected system shutdown from EventData

186 Views Asked by At

Windows' Event ID 6008 is Unexpected Shutdown event (see in System's Event Viewer). The problem is that time of the unexpected system's shutdown is written in bytes array (which is called EventData).

I want to fetch this date (in my C# application) from EventData but I don't know how time is encoded in bytes array.

0

There are 0 best solutions below