Built off the open source project Osquery
Description: This query checks a registry key to see if Fast Startup is enabled or disabled on the computer.
What The Data Shows: With Windows 10 and 11, Fast startup can prevent a computer from truly shutting down if enabled since it goes into a hibernation mode. When fast startup is disabled, a shutdown will be treated like a restart clearing all memory etc. allowing the computer to run more efficiently.
SQL: SELECT CASE cnt
WHEN 0 THEN "DISABLED"
ELSE "ENABLED"
END "Fast Startup"
FROM (SELECT count(name) AS cnt
FROM registry
WHERE PATH='HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Power\\HiberbootEnabled' AND DATA = 1);
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.