Matching data source with its data component

i have a question what if i don`t have edr and sysmon and we start to builds the soc operation also have default win event logs beside reviewing it we missed all PowerShell and cmd logs as isn't  enabled in GP in addition to advanced audit policy not enabled how i can i treat with such case

