Windows EventInformation
Windows Event ID 4097 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 4097 fires when Windows detects a system time change, either manual or automatic. Critical for security auditing and troubleshooting time synchronization issues.