You need a security disaster toolkit at the ready should any event occur. You also need a disaster checklist that maps out processes and resources to speed recovery. Microsoft-specific tools to consider for your toolkit starting with Sysmon. Having operating system access so you can boot into and restore from a backup is key to recovering quickly. Include mundane items such as toothbrush, toothpaste and snacks with your computing tool bag as you might be pulling an all-nighter to get your network functional again.”]
Source: https://www.csoonline.com/article/3453693/how-to-build-a-windows-disaster-recovery-toolkit.html