Windows EventInformation
Windows Event ID 4660 – Microsoft-Windows-Security-Auditing: Object Deleted
Event ID 4660 logs when an object is deleted from Active Directory or the local security database, providing audit trail for security-sensitive deletions including user accounts, groups, and organizational units.
