Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 878 of 878

Internet Domain/DNS: Multiple SPF Records

This is actually a built in metric, but it can be used to detect when multiple SPF records are defined by the following alert rule: Metric: Internet Domain/DNS: SPF Records (SPFRecord metric)Operator: containsThreshold: ,v=spf1
Darren White 4 months ago in Internet Domain/DNS 0

Active Directory: Domain Admins with Password Age over 365 Days

Number of days can be changed to suit needs. Created this metric to narrow down results from the 'Privileged User with Stale Password' metric built into Liongard
Guest 4 months ago in Active Directory 0

macOS: Huntress Installed

This will return a true or false value for the installation of Huntress
De'Shard Brown 4 months ago in macOS 0

macOS: SentinelOne Installed

This will return a true or false value for the installation of SentinelOne
De'Shard Brown 4 months ago in macOS 0

SonicWall: Active Licenses Expiring in 90 days

This metric works for Gen 7 firewalls and returns a list of all active licenses that are going to expire in the next 90 days.
Justin Penchina 5 months ago in SonicWall 0

Azure Active Directory: Conditional Access Policies with Excluded Users Summary

I based this off another metric created by David Chapman, so thanks to him for the original idea! I added the ability to also bring in users from excluded groups for a full picture of what users are excluded from CA policies. There might be a more...
Noah Tatum 5 months ago in Azure Active Directory 0

Azure Active Directory: List of MFA Conditional Access Policies applied to ANY Application

Returns a list of CA policies applied to ANY application in Azure Active Directory
Lamont Largie 6 months ago in Azure Active Directory 0

Azure Active Directory: List of MFA Conditional Access Policies

Returns a list of CA's enabling MFA in Azure Active Directory
Lamont Largie 6 months ago in Azure Active Directory 0

Azure Active Directory: List of MFA Conditional Access Policies applied to ALL Applications

Returns a list of CA policies requiring MFA authentication for ALL applications in Azure Active Directory.
Lamont Largie 6 months ago in Active Directory 0

OneLogin: Active User Count

Count of users that are actively licensed in OneLogin
Robert Herbaugh 6 months ago in OneLogin 0