Open Source VB Script for Wondows 2000, 2003, and XP so you can customize for your environment.
The Security Log Alerter monitors for potentially hazardous actions to the local machine as well as to active directory. It then sends a detailed alert and/ or puts the data to the SecAlerts table in the database. *Some examples of what is collected and alerted on by default:
-Addition to and removal from Domain Admins Group
-Addition to and removal from Enterprise Admins Group
-Addition to and removal from Schema Admins Group
-OU Creation
-OU Deletion
-DC Creation/ deletion
-Admin account password change
-Domain policy modification
-Trust relation modifications
-Scheduler jobs created
-System Time Changed
-Event Logs cleared
-And attempts to log into the DC local and remote
-Kerberos policy changes
