Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 885 of 885

Microsoft 365: SSO Certificate Expiring in 30 days

This will find any SSO certificates that are going to expire in 30 days or less.
Guest 16 days ago in Azure 0

Microsoft 365: Shared Mailboxes with Assigned Licenses

Use for trying to find Shared Mailboxes that still have a license assigned.
Kevin Fuller 22 days ago in Microsoft 365 0

Windows Workstation: Unauthorized AnyDesk Installation (Last 7 Days)

Metric Name: Windows Workstation: Unauthorized AnyDesk Installation (Last 7 Days) Category: Windows Workstation Description: This metric identifies and reports recent installations of AnyDesk on Windows workstations that may not have been authoriz...
Lamont Largie about 1 month ago in Windows Workstation 0

Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks)

Metric Name: Windows Server: Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks) Category: Windows Server Description: This metric is designed to identify and report on local account logon failures that exceed one attempt within the past ...
Lamont Largie about 2 months ago in Windows Server 0

Windows Server: Veeam Backup & Replication Version

Metric Name: Windows Server: Veeam Backup & Replication Version Category: Windows Server Description: This metric tracks and reports the version and installation details of the Veeam Backup & Replication Console on Windows Servers. It prov...
Lamont Largie about 2 months ago in Windows Server 0

SentinelOne - Resolved/unresolved Threats

Adjust as needed - working on some reporting KPI metrics and wanted to share. Credit to support for the query!
Steve King 2 months ago in SentinelOne 0

Cisco ASA check for CVE-2024-20353 | CVE-2024-20359

To check if the above CVE's are present on your Cisco ASA you will need to preform the below steps. First you will need to use the above metric to return a list of your ASA's software versions If your ASA version returns a value with parentheses (...
Austin Unger 3 months ago in Cisco ASA 0

Palo Alto | CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect

This metric will be used to detect affected versions for the below CVE. The metric will return true or false if the system is running an affected version. https://security.paloaltonetworks.com/CVE-2024-3400 This issue is fixed in hotfix releases o...
Austin Unger 3 months ago in Palo Alto 1

Auvik: List of Actual Billable Devices

Auvik only bills you for core billable devices (Firewalls, Routers, Switches, and Cisco Wireless Cloud Controllers). The problem is, you can also unmanage a device (if it's not a important device). This metric will account for any core device t...
Jason Bandy 4 months ago in Auvik 0

Auvik: Count of Actual Billable Devices

Auvik only bills you for core billable devices (Firewalls, Routers, Switches, and Cisco Wireless Cloud Controllers). The problem is, you can also unmanage a device (if it's not a important device). This metric will account for any core device then...
Jason Bandy 4 months ago in Auvik 0