Updated paper on Intrusion Detection under Windows NT. This should make things a bit clearer. Microsoft Powerpoint presentation.
You can download it from the following link: https://packetstormsecurity.com/files/download/11741/SANS99wedUPDATE.PPT
Source: https://packetstormsecurity.com/files/11741/SANS99wedUPDATE.PPT.html