Windows EventInformation
Windows Event ID 4880 – Security: Certificate Services Template Security Permissions Changed
Event ID 4880 logs when security permissions on a Certificate Authority template are modified, indicating changes to who can request or manage specific certificate types in your PKI infrastructure.