Analyzing system shutdown