Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Microsoft 365

Showing 126 of 959

Microsoft 365: Defender - Safe Links Enabled - User Percent

Metric Name: Microsoft 365: Defender - Safe Links Enabled - User Percent Category: Security Description: This metric monitors the percentage of users who have the Safe Links feature enabled in Microsoft 365 Defender. Safe Links helps protect users...
Lamont Largie 6 months ago in Microsoft 365 0

Microsoft 365: Defender - ATP Protection Enabled

Metric Name: Microsoft 365: Defender - ATP Protection Enabled Category: Security Description: This metric evaluates whether Advanced Threat Protection (ATP) is enabled within Microsoft 365 Defender. It helps ensure that advanced threat prevention ...
Lamont Largie 6 months ago in Microsoft 365 0

Microsoft 365: Count of All Group Members

This metric displays a count of all active group members.
Michael Thompson about 1 year ago in Microsoft 365 0

Microsoft 365: Mailbox Size Greater than XX

This will look for users with mailboxes larger than 45. Customize the value to change Metric. Output will include mailname and size of mailbox.
Devon about 3 years ago in Microsoft 365 2

Microsoft 365: Shared Mailbox Listing

This metric displays a list of the names of the shared mailboxes.
Michael Thompson about 1 year ago in Microsoft 365 0

Microsoft 365: Shared Mailbox Count

This metric displays a count of shared mailboxes.
Michael Thompson about 1 year ago in Microsoft 365 0

Microsoft 365: Active Email Addresses and Aliases by User (No Guest Accounts)

A list of emails addresses in use by user.
Kevin Fuller over 1 year ago in Microsoft 365 0

Microsoft 365: New users created 7 days ago with MFA disabled

This metric will allow you to find M365 users created 7 days ago and MFA is Disabled. We are using this metric along with an actionable alert to create tickets when one of these users are found. This can be adjusted to find users created in a rang...
Guest about 1 year ago in Microsoft 365 0

Microsoft 365 : Malicious Application Consent - Padlet

This application has actively been used during account compromises to create a backup of the accounts mailbox.Create an actionable alert for this and audit all environments.
Jordan Docter about 1 year ago in Microsoft 365 0

Microsoft 365: Licenced Mailbox User

Lists all users with a licenced mailbox (not all data prints can use the "?Has_Exchange_License == `True`" due to type of licence and graph permissions!!) Can be turned into a count with length(@) Can also separate enabled and disabled with "&...
Austin B [QuoStar] over 2 years ago in Microsoft 365 0