Recorded Future Interview Question

How could you use windows security event logs to understand what happened on a specific Windows computer?