Monitoring for unusual activity, hardening access privileges and regularly testing backups are among the top strategies to mitigate cyber threats targeting the active directory (AD) of an organization.