The steps you can take to monitor your active directory and how to alert on some events to give you an idea of the stuff that is going on inside your environments.

Mission: Create an alert for a special group assignment (ID 4964)