Dump the schema for Windows Security Events

Here's a useful Powershell one-liner for getting at the Windows Security Event Log schema:
(get-winevent -listprovider microsoft-windows-security-auditing).events

You may want to save the output to a varialbe:
$events = (get-winevent -listprovider microsoft-windows-security-auditing).events

Here's an example of the output: