I like the practical avenue Randy Franklin Smith (@randyfsmith) has taken with his new Windows Audit Logging Kits. I haven’t seen them but I like his approach.
Check them out here:
http://www.ultimatewindowssecurity.com/securitylog/rosetta/default.aspx