Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 959 of 959

N-able RMM: Unique Agent Versions List

Returns a list of the unique N-able agent versions.
Mathias Sovine 24 days ago in N-able RMM 0

Hyper-V: Snapshot List

This returns the names of VMs with snapshots and the creation time of the snapshots.
Mathias Sovine 24 days ago in Hyper-V 0

Sophos XG: Pharming Protection

This returns whether Pharming Protection is enabled
Guest 24 days ago in Sophos XG 0

Sophos XG: DHCP Configuration where Conflict detection is not enabled

Returns the name for a DHCP server entry on the firewall that does not have conflict detection enabled.
Guest 24 days ago in Sophos XG 0

Sophos XG: Firewall Rules without Logging Enabled

This returns firewall rule names without logging enabled
Guest 24 days ago in Sophos XG 0

VMware ESXi: CVE-2025-22224 | CVE-2025-22225 | CVE-22226

This query will report on the ESXi build number and will return the hostname of systems not running the fix versions listed here. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390
David Chapman 28 days ago in VMware ESXi 0

Hyper-V: Checkpoint created older than 14 days and is not a VEEAM replica

Checks if the Microsoft Hyper-V checkpoint was created more than 14 days ago, prints out the VMName and excludes replica's created by VEEAM by checking for _replica.
Niels van Aert 7 months ago in Hyper-V 1

M365: AAD App Secrets Expiring within 30 days

Looks for applications with expiring/expired secrets (within 30 days), then outputs the Application name, and the secrets associated that are expiring/expired.
Leland Shane almost 2 years ago in Microsoft 365 1

Microsoft 365 : Malicious Application Consent - PerfectData

This application has actively been used during account compromises to create a backup of the accounts mailbox.Create an actionable alert for this and audit all environments.
Devon almost 2 years ago in Microsoft 365 1

Microsoft 365: Shared Mailboxes with Assigned Licenses

Use for trying to find Shared Mailboxes that still have a license assigned.
Kevin Fuller 9 months ago in Microsoft 365 1