| Event Id | 520 |
| Source | Security |
| Description | The system time was changed. Process ID: <Process ID> Process Name: <Process Name> Primary User Name: <Primary User Name> Primary Domain: <Primary Domain> Primary Logon ID:<Primary Logon ID> Client User Name: <Client User Name> Client Domain: <Client Domain> Client Logon ID: <Client Logon ID> Previous Time: <Previous Time> New Time: <New Time> |
| Event Information | According to Microsoft : Cause : The computer's clock was changed. It might have been synchronized with a time server on the Internet or an intranet, or a user might have manually set the system time. This message is logged for informational purposes only. Resolution : No user action is required. |
| Reference Links | Event ID 520 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4616. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.