I am giving a talk at the SANS Threat Hunting & IR Summit in New Orleans Sept 6th & 7th. You Can get more information here:
"This is the fastest way I found to hunt for malicious activity on Windows endpoints" will help people understand how to hunt and what to hunt for on Windows endpoints.