Could care less this post is nearly 10 years old, I’m just stunned at how poor this criticism is. (OP is too nice to tell you off.)

Security Event 4608 (Security State Change) is more accurate.

Some of us are looking for the exact moment it happened. A person’s computer could take 15 minutes to load. You’d have no idea how long the boot process takes, so you don’t have an exact idea of when it shutdown and when it started again.