Windows EventInformation
Windows Event ID 4714 – Microsoft-Windows-Security-Auditing: System Security Access Control List Was Changed
Event ID 4714 fires when the System Access Control List (SACL) is modified on a Windows system, indicating changes to audit policies or security monitoring configurations.