https://github.com/p0dalirius/LDAPmonitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

You need to be administrator in order to access events ID

./LDAPmonitor.py -d domain.local -u Admin -p "password" --dc-ip xx.xx.xx.xx