The system time was changed.

Subject:
Security ID: %1
Account Name: %2
Account Domain: %3
Logon ID: %4

Process Information:
Process ID: %9
Name: %10

Previous Time: %6 %5
New Time: %8 %7

This event is generated when the system time is changed. It is normal for the Windows Time Service, which runs with System privilege, to change the system time on a regular basis. Other system time changes may be indicative of attempts to tamper with the computer.

Note: Process Information audit data is available only on computers running Windows Server 2008 R2 or Windows 7.