| Event Id | 4616 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The system time was changed. Subject: Security ID:<Security ID> Account Name:<Account Name> Account Domain:<Domain Name> Logon ID:<Logon ID> Process Information: Process ID:<Process ID> Name:<Name> Previous Time:<Previous Time> New Time: <New Time> |
| Event Information | Cause : This event is generated when the system time is changed. It is normal for the Windows Time Service, which runs with System privilege, to change the system time on a regular basis. Other system time changes may be indicative of attempts to tamper with the computer. Resolution: This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.