The rule collects raw events for the AD Duplicate Accounts report.
For more information, see:
Microsoft Help and Support for Microsoft Windows Server 2008 and above
Microsoft Knowledge Base