Monitoring Windows Event Logs for Security Breaches
Good article to get your pointed in the right direction -
http://www.petri.com/monitoring-windows-event-logs-for-security-breaches.htm
http://www.petri.com/monitoring-windows-event-logs-for-security-breaches.htm