Before SQL Servers stops completely it will log a message both in to SQL Server Error log and OS Eventlogs, Works the same way when you start the sql server. Check you Errorlog you will see " SQL Server is starting at priority class 'XYZ'( # CPUs detected)" and "SQL Server is terminating due to 'stop' request from XYZ". You can also see the Date/Time and the source