adSpy is an (unfinished, and not yet functional) open-source Active Directory change auditing tool written in Go.
The goal of adSpy is to provide near real-time visibility into changes made to your Active Directory domain as they happen, as well as track historical changes over time, helping you monitor and audit modifications such as user, group, and organizational unit changes.
- Near Real-time Object Monitoring: Receive updates as changes are made or replicated within Active Directory
- Audit & Logging: Keep track of all historical changes for compliance or troubleshooting
- Efficient Processing: Written in Go (with the hopes of) decent performance and scalability.
To install adSpy, follow these steps:
-
Clone the repository:
git clone https://github.com/f0oster/adSpy
-
Navigate into the project directory:
cd adSpy -
Build the project:
go build -o adSpy
-
Run the tool:
./adSpy
You can configure adSpy via the settings.env file.
Example settings.env:
LDAP_BASE_DN="dc=example,dc=com"
LDAP_DCFQDN="lab.dc.com"
LDAP_USERNAME="[email protected]"
LDAP_PASSWORD="password"
LDAP_PAGESIZE=1000