Mitigating Active Directory threats before, during and after disaster