Windows EventInformation
Windows Event ID 1102 – Microsoft-Windows-Eventlog: Security Log Cleared
Event ID 1102 indicates the Windows Security log has been manually cleared by an administrator or system process, triggering immediate audit trail documentation.