Add dissect.esedb compatibility to secretsdump

[Schamper]

See #1448. I'm not sure how tightly integrated you'd want this to be in impacket, so I opted for a simple compatibility shim. This can of course be changed to a full replacement of the existing ESE implementation.

This should bring a considerable performance improvement to secretsdump. My sample AD with only 3 users already sees an improvement (1s vs 2s), but in the past we've seen domains with over 100k users take less than a minute, whereas the original secretsdump would take >24 hours.

@dirkjanm

https://github.com/fox-it/dissect.esedb

[Paradoxis]

Is there any plans of adding this in the near future? Secretsdump is painfully slow in large scale environments and this would be a real improvement

[almandin]

Can confirm that using esedb from dissect can handle very large NTDS, I parse multi-GB NTDS files with ntdsdotsqlite. Last time I checked I parsed a 7GB NTDS file in like 6/7 minutes (even though it extracts everything : groups, users, computers, domains, orga. units etc...).