SharpLDAPmonitor.exe allows you to monitor creation, deletion and changes to LDAP objects live during your pentest.
Command Reference:
Target IP: 10.10.10.1
Attacker IP: 10.10.10.2
Domain: test.local
Username: test
Password: Welkom01!
SharpLDAPmonitor.exe /dcip:10.10.10.1 /user:TEST.local\test /pass:Welkom01!