Get-WinEvent System | Where-Object {$_.id -eq 6005} | Select-Object -first 20 | Select TimeCreated, LogName, Level, LevelDisplayName, Id, ProviderName, Message | Out-GridView