Yes you should be able to pull it from your domain controllers. Unless they're also down, which they're likely to be seeing as Tier 0 assets are most likely to have crowdstrike on them. So you're now in a catch 22.

Log into hypervisor, rollback VM

Rolling back an Active Directory server is a spectacularly bad idea. Better make doubly sure it's not connected to any network before you even attempt to do so.

Microsoft shops gonna be running Hyper-V. Probably also got hosed.

It's not a failing of Internet infrastructure.

It's one vendor pushing out a bad update, and thousands of companies with no supply chain diversity.

I responded to another comment with this and you are right, that is a fair clarification.

The base infrastructure worked perfectly fine. The stuff on top of it, not so great.