Detection rules › By eventMicrosoft-Windows-Security-Auditing event 46161 detection rule reference this event. View event page.Sigma (1)Unauthorized System Time Modification severity low T1070.006