Windows EventInformation
Windows Event ID 4719 – Microsoft-Windows-Security-Auditing: System Audit Policy Changed
Event ID 4719 fires when Windows audit policy settings are modified, indicating changes to security auditing configuration that affect what events get logged.