Isa 2004

i have isa server 2004 with sp2 and it has a list of most active applications and there are some .exe files that are in question and i was wondering if there is a way to find out which machine or machines in the domain are launching the .exe file like maybe the ip address of the machine/s