Windows EventInformation
Windows Event ID 4950 – Microsoft-Windows-Kernel-General: System Time Changed
Event ID 4950 fires when the system time is changed on a Windows machine, either manually by a user or automatically by time synchronization services.