Windows EventInformation
Windows Event ID 16384 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 16384 fires when Windows detects a system time change, either manual or automatic. Critical for security auditing and troubleshooting time synchronization issues in domain environments.