Can asterisk event table tell me user vs system hangup?

Can asterisk event table tell me user vs system hangup ?

Did someone at a CLI hang up channel (operator of sorts) … or did user hang up normally ?

What table and what fields should I be researching to get this answer ?