Regular reviewing of these Windows event logs alone or in combination might be your best chance to identify malicious activity early.