Security Event ID 4723 and 4724 log when an accounts password was changed.
Since changing account passwords can be abused by attackers to lock out legitimate user as well as gaining access to the clear text password via Pass the Hash if only the hash is known. Other attacks like Pass the Cert can also use a password change as a means to gain access to an account.