title: How to determine whether a user has turned on the computer in an EDR?
body: <p>I have a question.</p>
  <p>In what way can I determine when the computer is turned off and then on, from the logs on the EDR?</p>
  <p>When the computer starts, what are the first files to be logged?</p>
  <p>Best Regards</p>