[enhancement] Use LDAP control LDAP_SERVER_NOTIFICATION_OID to get only changes

[p0dalirius]

Use LDAP control LDAP_SERVER_NOTIFICATION_OID (1.2.840.113556.1.4.528) to get only changed objects in a (objectClass=*) query.

PersistentSearch ::= SEQUENCE 
{
    changeTypes INTEGER,
    changesOnly BOOLEAN,
    returnECs BOOLEAN
} 

Drawbacks

With this technique, we only get the new value, and thus cannot print "Value changed from '{old_value}' to '{new_value}'"

References

• https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/f14f3610-ee22-4d07-8a24-1bf1466cba5f
• https://ldap3.readthedocs.io/en/latest/microsoft.html