Windows EventInformation
Windows Event ID 5137 – Microsoft-Windows-Security-Auditing: Directory Service Object Created
Event ID 5137 logs when a new object is created in Active Directory, providing detailed audit information about the creation event, including the object DN, class, and security principal responsible.