NEW SECURITY & EXPLOIT TOOLS from Microsoft: The Security Monitoring and Attack Detection Planning Guide. This guide describes how to plan a security monitoring system on Windows-based networks. This system can detect attacks that originate from internal and external sources. The main aim of a security monitoring system is to identify unusual events on the network that indicate malicious activity or procedural errors.
Source http://www.microsoft.com/technet/security/topics/
auditingandmonitoring/securitymonitoring/default.mspx
 
Urs