Windows Security Log Event ID 4621
4621: Administrator recovered system from CrashOnAuditFail
On this page
In testing I configured the log to crash on audit failure and then filled up the security log which indeed brought the system down. I rebooted, reset the CrashOnAuditFail registry setting, cleared the log and restarted. The event was never logged. I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.
Free Security Log Resources by Randy
Setup PowerShell Audit Log Forwarding in 4 Minutes