We created a table in our extension that helps monitor log files. The blog describes on how the table can be used to monitor for IIS logs https://medium.com/eclecticiq/using-log-parsing-to-stop-microsoft-iis-backdoor-attacks-3bd6081dc47d