t94j0/adexplorersnapshot-rsConverts Active Directory Explorer snapshot (.dat) files into BloodHound CE JSON archives for graph-based AD attack-path analysis and reconnaissance.
Rewrite of ADExplorerSnapshot.py. Outputs a .tar.gz of BloodHound CE JSON files for ingestion.
Please see the issues with this project before using it. It's not a drop in replacement yet.
Pre-built binaries for Linux and Windows are published in releases
Usage: convertsnapshot [OPTIONS] <INPUT>
Arguments:
<INPUT> Input .dat file path
Options:
-o, --output <OUTPUT> Output .tar.gz file path
-c, --compression <COMPRESSION> Compression level (0-9, default 6)
-v, --verbose Verbose output
-h, --help Print help
-V, --version Print version
$ convertsnapshot ./data/snapshot.dat
Output written to: 8YO51UQHGM.tar.gz
Total elapsed time: 47.034845ms
$ convertsnapshot -c 9 --output output.tar.gz ./data/snapshot.bak
Output written to: output.tar.gz
Total elapsed time: 47.26538ms