Auditing Active Directory.
This video describes ways to audit Active Directory.
Active Directory Security
User Management
Configure a robust audit policy
Control Access to Command Prompt, drives, SIDs, direct access
Privileged access management (PAM)
Server Security
Encryption
BCP DR