New comment on reddit

That's not going to tell you if the system's been booted by "other means" – that's only going to tell you if the Windows install on the disk has booted

If someone's used a live CD, or mounted the drive as a secondary somewhere, you won't know by looking at the Windows event log

January 13, 2020 at 10:01AM
via reddit https://www.reddit.com/r/security/comments/eo3uq5/is_it_possible_to_know_the_boot_history_of_my_pc/fe8lx8x?utm_source=ifttt