Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Active Directory

Showing 104 of 879

Active Directory: Check LDAP Channel Binding Policy

Check group policy to confirm if LDAP channel binding is enabled to mitigate known vulnerabilities. https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV190023 https://support.microsoft.com/en-us/topic/2020-ldap-channel-binding-and-l...
Lee Mackie almost 2 years ago in Active Directory 0

Active Directory: Check LDAP Signing Policy

Check LDAP Signing is enabled via Group Policy to ensure mitigation of known vulnerabilities. https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements To ...
Lee Mackie almost 2 years ago in Active Directory 0

Active Directory: Current Time

Use this metric to find where agents are not pulling Active Directory data correctly or are failing. Using this metric, I found it is a good idea to use our RMM to restart the liongard service every day.
Jason Holcomb about 2 years ago in Active Directory 0

Active Driectory - DNS Forwarder List

Pulls a list of DNS forwarders. Helpful for setting OpenDNS forwarders. These settings can be different on each DNS server in the same domain.
Jason Holcomb about 2 years ago in Active Directory 0

Active Directory: KRBTGT Account Password Needs Reset

krbtgt user account password should be changed at a minimum every 180 days. https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-forest-recovery-resetting-the-krbtgt-password
matt longenecker over 2 years ago in Active Directory 0

Active Directory: User Accounts With Brute Force Attempts Count 5+ Count

Current Brute force metric alerts after 4 failed attempts even on disabled accounts from multiple years ago. This provides a custom option to be closer to the lockout policy with the option of monitoring only enabled accounts. This provides a coun...
Devon over 2 years ago in Active Directory 1

Active Directory: Display Names of DNS Forward Lookup Zones

This can be useful if needing all forward lookup zones for DNS filtering platforms such as Cisco Umbrella where all lookup zones need to be accounted for.
Nick Dechnik over 2 years ago in Active Directory 0

Active Directory: Count of DHCP Scopes with Failover Configured

Will count the number of DHCP scopes that have DHCP failover configured for them. Can combine with a total count of DHCP scopes metric to determine if there are scopes without failover enabled.
Robbie Kibler almost 3 years ago in Active Directory 0

Active Directory: List of scopes without DHCP Failover Present

This will list the DHCP scopes that do not have DHCP failover enabled for them.
Robbie Kibler almost 3 years ago in Active Directory 0

Active Directory: Active Server Count

This is helpful to someone who's trying to obtain/maintain visibility into the count of active servers at an organization. This is a good Metric for QBRs or recurring site reviews.
Addison Caldwell almost 3 years ago in Active Directory 0