Recently I keep finding a HyperV VM (the MSSP's vulnerability scanner) that is in the "Stopped" state when it shouldn't be and want to find the cause. I'm a support officer slowly transitioning to sysadmin and not very familiar with Windows logs yet. I can't find anything in the event viewer that would suggest why it stopped. How do I search/filter for this event for a specific VM?
It's worth adding that the VM is Qualys running on Ubuntu.