SharpLDAPmonitor.exe allows you to monitor creation, deletion and changes to LDAP objects live during your pentest.
Command Reference:
Target IP: 10.10.10.1
Attacker IP: 10.10.10.2
Domain: test.local
Username: john
Password: password123
SharpLDAPmonitor.exe /dcip:10.10.10.1 /user:TEST.local\john /pass:password123