Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 953 of 953

Microsoft 365: Count of All Group Members

This metric displays a count of all active group members.
Michael Thompson 10 months ago in Microsoft 365 0

Azure Active Directory: Conditional Access Policy - Block Legacy Authentication - Name & State

Searches for Conditional Access Policies that contain "legacy authentication" in it's name and returns the current state of the found CA Policy. Use Cases: Can be used in Identifying if the default Microsoft Policy titled "Block legacy authenti...
Lamont Largie over 2 years ago in Azure Active Directory 1

Microsoft 365: Nonprofit License Excluding Donated Licenses

Use this query when syncing nonprofit licenses. You can change the consumedUnits that are subtracted depending on the donated licenses.
Phil at Gradient MSP about 2 years ago in Microsoft 365 0

JumpCloud: Users - MFA Status List

Lists all users and their MFA status including: Name Account Enabled or Disabled Account Locked (only shows if locked) MFA Configured or Off MFA Excluded (only shows if excluded)
Josh Archibald 5 months ago in JumpCloud 0

Fortinet CVE-2024-23112 Device check

The metric will return a true / false value depending on if the device is on a patched firmware based on FortiOS.
Austin Unger 11 months ago in Fortinet FortiGate 0

Datto RMM : Device Offline > 30 Days

List of Devices that have not checked in > 30 days
Lamont Largie over 2 years ago in Datto RMM 1

Duo Security: Disabled Users

Grab all users who are showing as disabled.
Matthew Waddell almost 2 years ago in Duo Security 0

Active Directory: Summary of Enabled Group Policies

This metric will list all of the enabled group policies when applied to an Active Directory inspector. It will also return the following: Is the policy is detached (T/F) Is the policy enabled for users (T/F) Is the policy enabled for computers (T/F)
Lamont Largie over 2 years ago in Active Directory 0

Windows Workstation: Windows Workstation: KB5041580 Not Installed

Overview This query searches the available updates on the machine and identifies if an available update exists for KB5041580 and that it is not installed. If it finds a match, then it returns the Available Updates array. Use Case To address Window...
Paul Taplett 6 months ago in Windows Workstation 0

[Microsoft 365: Non-Admin, Non-Guest, License Assigned, MFA disabled]

This query looks for non-admin users who have an active license within your organization that do not have MFA enabled (ignoring guest users).
Charles Van Duynhoven about 3 years ago in Microsoft 365 5