Which windows logs in to monitoring be interesting?

Hi Cor,

I'd start by reading this KB: https://support.microsoft.com/en-us/help/947226/description-of-security-events-in-windows-vista-and-in-windows-server-2008

-Paul