Which groups are considered Critical in the default "Critical Group Membership changes" search?
"Critical Group Membership" searches will not return changes for all groups, it will only return changes to 'Critical' groups.
From the "Change Auditor for Active Directory Events Reference.pdf" under 'Forest Configuration' section, you can search the document for "Member Added to Critical Enterprise Group"),
Critical enterprise groups include:
