Windows EventInformation
Windows Event ID 4715 – Microsoft-Windows-Security-Auditing: System Security Access Control Policy Changed
Event ID 4715 fires when system security access control policies are modified, indicating changes to security settings that control access to system resources and audit configurations.