ZEKASTRA

SystemSystem and services

6008 · The previous system shutdown was unexpected

Logged by the EventLog source at the next startup when the previous shutdown was not clean. The message contains the date and time of that shutdown.

01Fields in the event

The cited Microsoft page does not list field names for this event.

02How to use it

The time in the message estimates when the system went down; examine events just before it, and compare with Kernel-Power 41 and any crash dump.

03Caveats

The time and date in the message are rendered as text in local time conventions; verify the time zone before placing it on a UTC timeline.

05Sources

  1. Microsoft Learn — Troubleshoot unexpected reboots using system event logs checked 2026-10-18

Contact and service requests

Contact us about examination services related to this page, support for expert witnesses, or collaboration. Please do not attach evidence files or personal data to your email.