Conversation

Notices

1. Embed this notice
   Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Thursday, 01-Dec-2022 22:17:43 JST Jake Hildreth (acorn) :blacker_heart_outline:

   in reply to

   • Rob Fuller

   @mubix Mmm, Publix Submarine sandwiches

   • Embed this notice
     Rob Fuller (mubix@infosec.exchange)'s status on Thursday, 01-Dec-2022 22:17:50 JST Rob Fuller

     I really wish Active Directory was a bit more PubSub. I would love if there was a way to subscribe to an a schema attribute and say, “when this changes for any object that has this attribute, let me know”. But AD’s decentralized model makes that very hard without running a script on every domain controller, running a server to monitor LDAP changes or the least timely, logging everything to a logging platform like Splunk and setting alerts up to tell me hours after it happened… Any other options out there? (And yes I know you can push logs faster but it’s not real-time or even close when you have hundreds of domain controllers).