Randy Franklin Smith has a site with a very good reference to security event log events.  Randy also does training on Windows security log analysis.