Adversaries may disable Windows event logging to limit data that can be leveraged for detections and audits.

Tactics
TA0005

Sub-technique of
T1562


See: MITRE ATT&CK