Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Windows Workstation

Showing 51 of 920

Windows Workstation: Last Logged In User has Local Admin Permissions?

Identifies if the last logged in user is a member of the "Administrators" group. Returns 'true' or 'false'
Henri Pitkänen almost 2 years ago in Windows Workstation 0

Windows Workstation: Is BitLocker Enabled on an OS Drive?

Identifies if BitLocker is enabled on an operating system drive. Returns 'true' or 'false'
Henri Pitkänen almost 2 years ago in Windows Workstation 0

Windows Workstation: Workstation Administrators

Creates a list of the users in the "Administrators" group, allows for change detections to be alerted on for this as well, of course.
Daniel Herr over 2 years ago in Windows Workstation 1

Windows Workstation: Windows11 Compatible

This metric will assess whether your workstations are compatible with the upgrade to Windows 11.
De'Shard Brown 9 months ago in Windows Workstation 1

Windows Workstation: Installed ThreatLocker Version

Displays the current version of ThreatLocker installed on a Windows Workstation
Lamont Largie almost 2 years ago in Windows Workstation 0

Windows Workstation: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 10 months ago in Windows Workstation 1

Windows Workstation: Missing Severity Software Updates over 14 days

Shows list of missing software updates over 14 days old which have a severity rating associated. (Cyber Essential Requirement in UK) add "| length(@)" to turn into a count of updates over X days
Austin B [QuoStar] about 1 year ago in Windows Workstation 0

Windows Workstation: Google Chrome Version

Returns the current installed version of Google Chrome
Paul Taplett about 1 year ago in Windows Workstation 0

Windows Workstation: Google Chrome Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Workstation is running a version of Google Chrome equal to or earlier than 116.0.5845.187
Paul Taplett about 1 year ago in Windows Workstation 0

Windows Workstation: Brave Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Workstation is running a version of Brave equal to or earlier than 1.57.64
Paul Taplett about 1 year ago in Windows Workstation 0