https://github.com/p0dalirius/LDAPmonitor
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
You need to be administrator in order to access events ID
./LDAPmonitor.py -d domain.local -u Admin -p "password" --dc-ip xx.xx.xx.xx