Monitoring for unusual activity, hardening access privileges and regularly testing backups are among the top strategies to mitigate cyber threats targeting the active directory (AD) of an organization.
https://www.securitymagazine.com/articles/96880-active-directory-cyber-hygiene-checklist-11-steps-to-securing-ad
