That being said, There is hope to bring process auditing and file integrity monitoring to Windows, which would be the event based tables, however it's unclear when those would land