Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 878 of 878

Azure Active Directory: List of MFA Conditional Access Policies applied to ANY Application

Returns a list of CA policies applied to ANY application in Azure Active Directory
Lamont Largie 6 months ago in Azure Active Directory 0

Azure AD: Complete List of Conditional Access Policies and Excluded Users

This metric will return a complete list of Azure AD Conditional Access policies and a list of excluded users for each policy. This is difficult because the policies only contain a list of user's ID, not their display names.
David Chapman 11 months ago in Azure Active Directory 1

OneLogin: Active User Count

Count of users that are actively licensed in OneLogin
Robert Herbaugh 6 months ago in OneLogin 0

OneLogin: MFA Not Enrolled Users

Used to list users that do not have any MFA devices enrolled
Robert Herbaugh 6 months ago in OneLogin 0

M365: AAD App Secrets Expiring within 30 days

Looks for applications with expiring/expired secrets (within 30 days), then outputs the Application name, and the secrets associated that are expiring/expired.
Leland Shane about 1 year ago in Microsoft 365 0

Duo Security: Disabled Users

Grab all users who are showing as disabled.
Matthew Waddell about 1 year ago in Duo Security 0

Active Directory: Never Used User Accounts Summary (With Exclusions)

This metric will list all accounts created over 30 days ago that have not been logged into. The metric also supports the RoarExclude group filter. The RoarExclude group filter will prevent alerts from triggering for users who are part of the RoarE...
Michael Thompson 3 months ago in Active Directory 0

Windows Workstation: List of Installed Software (Updated)

This metric provides a more readable output when used in the Software Inventory (CIS V8 Control 2.1) Report Template.
Michael Thompson 3 months ago in Windows Workstation 0

Windows Workstation: Missing Severity Software Updates over 14 days

Shows list of missing software updates over 14 days old which have a severity rating associated. (Cyber Essential Requirement in UK) add "| length(@)" to turn into a count of updates over X days
Austin B [QuoStar] 7 months ago in Windows Workstation 0

Fortigate: Show DeviceVersion, Current Firmware and Available Firmware

Patching devices is a critical component to CyberSecurity. Ensuring products are patched and updated, this metric shows you the current version and the available update with Fortigate version 7.x
Scott Davis over 1 year ago in Fortinet FortiGate 0