The Securing Active Directory Whitepaper is a fundamental, timeless, must read primer for Windows admins:
Best Practices for Securing Active Directory
Microsoft Docsiainfoulds