Reconnaissance

BOFHound

BOFHound requires minimally the samAccountType, distinguishedName and objectSid attributes from LDAPSearch to parse the data correctly, or else you'll encounter the Parsed XX Unknown Objects message.

Additionally, ntsecuritydescriptor is required to parse and ingest ACL relationships.