Windows EventInformation
Windows Event ID 4760 – Microsoft-Windows-Security-Auditing: User Account Deleted
Event ID 4760 fires when a user account is deleted from Active Directory or local system. This security audit event tracks account deletion operations for compliance and security monitoring purposes.