https://www.oryszczyn.com/using-azure-sentinel-to-monitor-server-reboots/