Event 1102 is logged to the security event log when the security event log is cleared. This event differs from most events in the security event log in that the event source is “Microsoft-Windows-Eventlog”, not “Microsoft-Windows-Security-Auditing”. By...