Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and take a course on how to write them from Liongard Academy!
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 970 of 970

Sonicwall: Exposed WAN zone SSH mgmt

Detects WAN Zone enabled SSH Management interfaces with ANY as the source IP
Austin B [QuoStar] over 3 years ago in SonicWall 0

N-able N-Central: Device Information with Asset Tag/Last User

Will display information on endpoints w/ their Device Name, Asset Tag, and LastLoggedInUser if available.
Nick Dechnik over 3 years ago in N-able N-central 0

N-able N-Central: Count of specific Windows 10 builds (Feature Update Level)

Change the OsVersion to whichever Windows 10 build you'd like to get a count of. 10.0.19043 is build 21H1. Other build numbers are easily available on the web (https://en.wikipedia.org/wiki/Windows_10_version_history)
Nick Dechnik over 3 years ago in N-able N-central 1

CIsco ASA: Detect if management has SSH 0.0.0.0 outside rule exists

Detect if management has SSH open to the outside. The outside can also be changed to 'inside' as well
Nick Dechnik over 3 years ago in Cisco ASA 0

Azure Active DIrectory: Enabled and Licensed Users with MFA disabled

Useful to filter for only enabled accounts that are also licensed and disabled their UPN if MFA is disabled. Azure AD P1/P2 is required or it will return no data.
Devon over 3 years ago in Azure Active Directory 0

Active Directory: Age of Oldest Stale Privileged User

Determines the highest number of days for all stale privileged users. This metric is useful for determining severity.
Robbie Kibler over 3 years ago in Active Directory 0

Ubiquiti Unifi: Auto Backup Enabled

Determines if automatic backups are enabled in Unifi.
Robbie Kibler over 3 years ago in Ubiquiti UniFi 0

VMware vCenter: Version

Simple metric to report the version of vCenter installed.
Robbie Kibler over 3 years ago in VMware vCenter 0

Cisco ASA: RDP (Port 3389) Rules Detected

Checks to see if RDP/Port 3389 is listed in an access list.
Robbie Kibler over 3 years ago in Cisco ASA 0

Windows: Specific Application Name and Version

This metric checks for a specific app and a corresponding version. Useful for just wanting a boolean result in an alert.
Robbie Kibler over 3 years ago in Windows Server 0