Windows EventInformation
Windows Event ID 8197 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 8197 fires when Windows detects a significant system time change, either manual adjustment or automatic synchronization. Critical for security auditing and troubleshooting time-related issues.