Windows EventInformation
Windows Event ID 5889 – Microsoft-Windows-Kernel-General: System Time Change Detected
Event ID 5889 indicates the system time was changed, either manually by a user or automatically by time synchronization services. This event helps track time modifications for security and audit purposes.