In order to collect boot time details, we have the following requirements:
- Our service account needs access to the
%systemroot%\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx
log - The endpoint has to be running Windows Vista or higher