How to know the computer boot record?

Although today is August 6th, my latest boot time is still July 31st

Similarly, fill in 6006 in , which is the shutdown record. You can see that the latest shutdown record is July 24, and the computer has not been shut down since then. Explain and close the notebook.The lid is not considered a shutdown

You may want to study the EDR terminal in the future, then you have to face the system logs of windows and linux. By the way, record the startup events and shutdown events of centos 7. You can see: There were 3 startup events on August 6th., 2 shutdown events.Then, there is a boot event on July 16, and a boot event on July 23, but there is no corresponding shutdown event

However, we can still find a crash event, that is, an abnormal shutdown event, such as a direct power failure, so the startup and shutdown events can always appear in pairs

Network security is a long way to go, let's wash it and sleep~