Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

Windows Server

Showing 77 of 918

Windows Server: AV/EDR - Sophos, Huntress, Defender Installed

Windows Server: Software Compliance - Sophos, Huntress, Defender Installed Category: Software Compliance Description: This metric pulls a list of all installed software from endpoints, specifically filtering for security-related software such as S...
Lamont Largie 3 months ago in Windows Server 0

Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks)

Metric Name: Windows Server: Windows Server: Excessive Failed Logon Alerts (Last 2 Weeks) Category: Windows Server Description: This metric is designed to identify and report on local account logon failures that exceed one attempt within the past ...
Lamont Largie 6 months ago in Windows Server 0

Windows Server: Servers with ScreenConnect Version 23.9.7 or Lower [CWE-288/CWE-22]

Checks to see if the server is running a ScreenConnect version that is 23.9.7 or lower. This will determine if the software needs to be upgraded to mitigate the recently vulnerability announced by ConnectWise: https://www.connectwise.com/company/t...
Guest 9 months ago in Windows Server 1

Windows Server: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 9 months ago in Windows Server 2

Windows: Printers and Port number

Short Metric to show local printers on a server with its configured PortName. Helpful for onboarding and identifying printer IP's
Austin B [QuoStar] almost 3 years ago in Windows Server 0

Windows Server: Veeam Backup & Replication Version

Metric Name: Windows Server: Veeam Backup & Replication Version Category: Windows Server Description: This metric tracks and reports the version and installation details of the Veeam Backup & Replication Console on Windows Servers. It prov...
Lamont Largie 6 months ago in Windows Server 0

Windows Server: Mozilla Firefox Version

Returns the current version of Mozilla Firefox
Paul Taplett about 1 year ago in Windows Server 0

Windows Server: Brave Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Server is running a version of Brave equal to or earlier than 1.57.64
Paul Taplett about 1 year ago in Windows Server 0

Windows Server: Microsoft Edge Version

Returns the current installed version of Microsoft Edge
Paul Taplett about 1 year ago in Windows Server 0

Windows Server: Microsoft Edge Version (WebP)

By using the "is not empty" condition, this metric allows you to build an Actionable Alert in order to detect if a Windows Server is running a version of Google Chrome equal to or earlier than 116.0.1938.81
Paul Taplett about 1 year ago in Windows Server 0