Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Windows Server

Showing 79 of 953

Windows Server CVE-2024-49113 | CVE-2024-49112

This query searches the available updates on the machine and identifies if an available update exists for the KB's 5048652,5048653,5048654,5048661,5048667,5048671,5048676,5048685,5048695,5048699,5048703,5048710,5048735,5048744,5048794,5048800 and ...
Austin Unger 27 days ago in Windows Server 0

Windows Server: Check if Network Card is DHCP or Static

Category: Network Configuration Metrics Description: This metric determines whether a Windows server’s network interface card (NIC) is configured for DHCP (Dynamic Host Configuration Protocol) or a static IP address. Purpose: To assist IT Organiza...
Lamont Largie about 2 months ago in Windows Server 0

Windows Server: Servers with ScreenConnect Version 23.9.7 or Lower [CWE-288/CWE-22]

Checks to see if the server is running a ScreenConnect version that is 23.9.7 or lower. This will determine if the software needs to be upgraded to mitigate the recently vulnerability announced by ConnectWise: https://www.connectwise.com/company/t...
Guest 12 months ago in Windows Server 1

Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks)

Metric Name: Windows Server: Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks) Category: Windows Server Description: This metric is designed to identify and report on local account logon failures that exceed one attempt within the past ...
Lamont Largie 8 months ago in Windows Server 0

Windows Server: AV/EDR - Sophos, Huntress, Defender Installed

Windows Server: Software Compliance - Sophos, Huntress, Defender Installed Category: Software Compliance Description: This metric pulls a list of all installed software from endpoints, specifically filtering for security-related software such as S...
Lamont Largie 5 months ago in Windows Server 0

Windows Server: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 11 months ago in Windows Server 2

Windows: Printers and Port number

Short Metric to show local printers on a server with its configured PortName. Helpful for onboarding and identifying printer IP's
Austin B [QuoStar] about 3 years ago in Windows Server 0

Windows Server: Mozilla Firefox Version

Returns the current version of Mozilla Firefox
Paul Taplett over 1 year ago in Windows Server 0

Windows Server: Brave Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Server is running a version of Brave equal to or earlier than 1.57.64
Paul Taplett over 1 year ago in Windows Server 0

Windows Server: Microsoft Edge Version

Returns the current installed version of Microsoft Edge
Paul Taplett over 1 year ago in Windows Server 0