Get-EventLog -LogName system | Where-Object { $_.eventID -eq 6005 -OR $_.eventID -eq 6006 -OR $_.eventID -eq 6008 }
# Method using the event log instead
Get-EventLog -LogName system | Where-Object { $_.eventID -eq 6005 -OR $_.eventID -eq 6006 -OR $_.eventID -eq 6008 }
# Method using the event log instead