Informações do sistema com o systeminfo (PowerShell)
PS C:\> systeminfo
Histórico de restart e shutdown (PowerShell)
PS C:\> Get-EventLog -LogName System |? {$_.EventID -in (6005,6006,6008,6009,1074,1076)} | ft TimeGenerated,EventId,Message -AutoSize –wrap
Excluir Shadow Copy (cmd)
C:\> diskshadow
DISKSHADOW> delete shadows oldest C:\
DISKSHADOW> quit