Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Windows Workstation

Showing 51 of 948

Windows Workstation: Windows11 Compatible

This metric will assess whether your workstations are compatible with the upgrade to Windows 11.
De'Shard Brown 9 months ago in Windows Workstation 1

Windows Workstation: Windows Workstation: KB5041580 Not Installed

Overview This query searches the available updates on the machine and identifies if an available update exists for KB5041580 and that it is not installed. If it finds a match, then it returns the Available Updates array. Use Case To address Window...
Paul Taplett 4 months ago in Windows Workstation 0

Windows Workstation: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 10 months ago in Windows Workstation 1

Windows Workstation: Last Logged In User has Local Admin Permissions?

Identifies if the last logged in user is a member of the "Administrators" group. Returns 'true' or 'false'
Henri Pitkänen almost 2 years ago in Windows Workstation 0

Windows Workstation: Is BitLocker Enabled on an OS Drive?

Identifies if BitLocker is enabled on an operating system drive. Returns 'true' or 'false'
Henri Pitkänen almost 2 years ago in Windows Workstation 0

Windows Workstation: Unauthorized AnyDesk Installation (Last 7 Days)

Metric Name: Windows Workstation: Unauthorized AnyDesk Installation (Last 7 Days) Category: Windows Workstation Description: This metric identifies and reports recent installations of AnyDesk on Windows workstations that may not have been authoriz...
Lamont Largie 6 months ago in Windows Workstation 0

Windows Workstation: Missing Severity Software Updates over 14 days

Shows list of missing software updates over 14 days old which have a severity rating associated. (Cyber Essential Requirement in UK) add "| length(@)" to turn into a count of updates over X days
Austin B [QuoStar] about 1 year ago in Windows Workstation 0

Windows Workstation: Google Chrome Version

Returns the current installed version of Google Chrome
Paul Taplett about 1 year ago in Windows Workstation 0

Windows Workstation: Google Chrome Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Workstation is running a version of Google Chrome equal to or earlier than 116.0.5845.187
Paul Taplett about 1 year ago in Windows Workstation 0

Windows Workstation: Brave Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Workstation is running a version of Brave equal to or earlier than 1.57.64
Paul Taplett about 1 year ago in Windows Workstation 0