How does Windows determine unexpected shutdown time?
Posted on 2013-05-21
Does anyone know how Windows determines the time that a system shut down unexpectedly? I'm guessing Windows does some sort of 'heartbeat timestamp' somewhere that gets cleared during a normal shutdown, and if Windows does not shut down cleanly, upon restart it will detect this uncleared timestamp and determine that it was the approximate time of the unexpected reboot. The reason for my asking is because I need to know what the time interval might be between the 'heartbeat timestamps'.
Thanks for any help in advance.