Windows EventInformation
Windows Event ID 4780 – Microsoft-Windows-Security-Auditing: Computer Account Password Changed
Event ID 4780 logs when a computer account password is changed in Active Directory. This security audit event tracks machine account password updates for domain-joined computers.