Microsoft has released version 11 of their Sysmon tool to help monitor and log system loading event to the event log to help with monitoring your system for malicious file deletions among other things. The tool remains resident in the OS and monitors a number of processes, please read at your leisure.
Cheers