Windows event ID 4715 - The audit policy (SACL) on an object was changed