Windows EventInformation
Windows Event ID 4733 – Microsoft-Windows-Security-Auditing: Security Group Member Removed
Event ID 4733 logs when a user or computer account is removed from a security group in Active Directory, providing critical audit information for access control changes.