Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 880 of 880

Windows: Specific Application Name and Version

This metric checks for a specific app and a corresponding version. Useful for just wanting a boolean result in an alert.
Robbie Kibler almost 3 years ago in Windows Server 0

Active Directory: Count of DHCP Scopes

Counts the total number of DHCP scopes on a server.
Robbie Kibler almost 3 years ago in Active Directory 0

Network Discovery: Vendor w/ IP Address

This is helpful to someone who's trying to obtain/maintain visibility into the systems found by the Network Discovery Inspector within an organization's network. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Als...
Addison Caldwell almost 3 years ago in Network Discovery 0

Office 365: Non-Admin Users with MFA Disabled List

This is helpful to someone who's trying to obtain/maintain visibility into the non-admin users in an organization's M365 instance. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Also, this Metric could be used to...
Addison Caldwell almost 3 years ago in Microsoft 365 1

SentinelOne - Resolved/unresolved Threats

Adjust as needed - working on some reporting KPI metrics and wanted to share. Credit to support for the query!
Steve King 3 days ago in SentinelOne 0

Windows Workstation: Windows11 Compatible

This metric will assess whether your workstations are compatible with the upgrade to Windows 11.
De'Shard Brown about 2 months ago in Windows Workstation 0

Fortinet CVE-2024-23112 Device check

The metric will return a true / false value depending on if the device is on a patched firmware based on FortiOS.
Austin Unger 2 months ago in Fortinet FortiGate 0

Windows Workstation: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 3 months ago in Windows Workstation 1

Windows Server: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum 3 months ago in Windows Server 2

Microsoft 365 : Malicious Application Consent - Padlet

This application has actively been used during account compromises to create a backup of the accounts mailbox.Create an actionable alert for this and audit all environments.
Jordan Docter 3 months ago in Microsoft 365 0