Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

All Metric entries

Showing 874 of 874

Microsoft 365: Count of All Group Members

This metric displays a count of all active group members.
Michael Thompson 3 days ago in Microsoft 365 0

Windows Workstation: Windows11 Compatible

This metric will assess whether your workstations are compatible with the upgrade to Windows 11.
De'Shard Brown 8 days ago in Windows Workstation 0

Duo Security Users No Activity for greater than 7 days

Days can be modified to whatever you wish
Shawn Meyer 6 days ago in Duo Security 0

Fortinet CVE-2024-23112 Device check

The metric will return a true / false value depending on if the device is on a patched firmware based on FortiOS.
Austin Unger 15 days ago in Fortinet FortiGate 0

Windows Server: Servers with ScreenConnect Version 23.9.7 or Lower [CWE-288/CWE-22]

Checks to see if the server is running a ScreenConnect version that is 23.9.7 or lower. This will determine if the software needs to be upgraded to mitigate the recently vulnerability announced by ConnectWise: https://www.connectwise.com/company/t...
Guest about 1 month ago in Windows Server 1

Windows Workstation: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum about 1 month ago in Windows Workstation 1

Windows Server: Unknown ScreenConnect Fingerprints

Replace the "xxxxxxxxxxxxxxxx" with your known ScreenConnect fingerprints. You can add additional fingerprints as needed with more "contains" statements separated by "||". These fingerprints can be found via software inventory (Add/Remove Programs...
Noah Tatum about 1 month ago in Windows Server 2

Internet Domain/DNS: DMARC present but set to "None

This metric will reveal if a domain has DMARC available but the action is set to None . Below are the possible outputs of the metric. No DMARC Found (self-explanatory) True = DMARC is present but the action is set to “none” False = The domain is n...
De'Shard Brown 20 days ago in Internet Domain/DNS 0

Windows Server: Free Space / Available Space in GB

This returns drive free space and total space, the others I saw did not work.
Dan Baker 22 days ago in Windows Server 0

Microsoft 365 : Malicious Application Consent - Padlet

This application has actively been used during account compromises to create a backup of the accounts mailbox.Create an actionable alert for this and audit all environments.
Jordan Docter about 2 months ago in Microsoft 365 0