I always find these lists when I'm not looking for them...

Does anyone have a good source for Windows Event IDs to monitor for NIST 800-171 or 800-53 r4/5 related security controls? I can find links that have some events to monitor, but I'm looking for something where the author has tied the Event IDs to audit/monitoring related controls.