Hello,

I'd like to know where does 'Last Boot Time' come from on an agent computer.

If I query Get-CIMInstance and look up the Event Viewer (Event ID 6009 & 6005) on the local computer, the date/time does not consistent to what is showing in 'Last Boot Time'.