Windows EventInformation
Windows Event ID 1796 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 1796 fires when Windows detects a system time change, either manual adjustment or automatic synchronization. Critical for security auditing and troubleshooting time-sensitive applications.