AutoElevate already writes to Windows event logs (https://support.cyberfox.com/360000239832-General-Troubleshooting/event-logging) so it'd be nice to include those in Huntress SIEM, tagged as it's own source - could be collected by existing agent on endpoints.