Windows EventInformation
Windows Event ID 5056 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 5056 fires when Windows detects a system time change, typically during boot or when time synchronization occurs. Critical for audit trails and troubleshooting time-related issues.