Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.

💡 Have feedback to improve this portal? Add it to the Ideas Portal.
🥴 See something off? Open a support chat to let us know.

ADD A NEW METRIC ENTRY

FILTER BY CATEGORY

Microsoft 365

Showing 74 of 545

Microsoft 365 : Malicious Application Consent - PerfectData

This application has actively been used during account compromises to create a backup of the accounts mailbox.Create an actionable alert for this and audit all environments.
Devon about 2 months ago in Microsoft 365 0

M365: AAD App Secrets Expiring within 30 days

Looks for applications with expiring/expired secrets (within 30 days), then outputs the Application name, and the secrets associated that are expiring/expired.
Leland Shane about 2 months ago in Microsoft 365 0

Microsoft 365: Conditional Access Administrator Role User List

Provides a list of users who belong to the Conditional Access Administrator role. Setting up a report against this metric will allow you to audit the current user list across all of your customers. Additionally, creating an Alert to use the "chang...
Paul Taplett 3 months ago in Microsoft 365 0

Microsoft 365: Exchange Licensed user w/ 95% full mailbox

Outputs percentage of Storage used against full mailbox size in addition to the email address and mailbox size. Microsoft's built in warning to the user is at 98%, Prohibits sending at 99%, and Prohibits receiving at 100%. This can be customized b...
Devon 7 months ago in Microsoft 365 2

Microsoft 365: Licenced Mailbox User

Lists all users with a licenced mailbox (not all data prints can use the "?Has_Exchange_License == `True`" due to type of licence and graph permissions!!) Can be turned into a count with length(@) Can also separate enabled and disabled with "&...
Austin B [QuoStar] 7 months ago in Microsoft 365 0

Microsoft 365: Maximum Secure Score

Returns the maximum secure score possible for the tenant.
Paul Taplett 8 months ago in Microsoft 365 0

Microsoft 365: Total Quantity of Licenses

Returns the total quantity of licenses (sum of consumed and unassigned licenses). Refer to the product plan identifiers for Product Friendly Names. Simply replace this to query other plans. https://learn.microsoft.com/en-us/azure/active-directory/...
Phil at Gradient MSP 3 months ago in Microsoft 365 0

Microsoft 365: Helpdesk Administrator Role User List

Provides a list of users who belong to the Helpdesk Administrator role. Setting up a report against this metric will allow you to audit the current user list across all of your customers. Additionally, creating an Alert to use the "changed" condit...
Paul Taplett 3 months ago in Microsoft 365 0

Microsoft 365: User Administrator Role User List

Provides a list of users who belong to the User Administrator role. Setting up a report against this metric will allow you to audit the current user list across all of your customers. Additionally, creating an Alert to use the "changed" condition ...
Paul Taplett 3 months ago in Microsoft 365 0

Microsoft 365: Security Administrator Role User List

Provides a list of users who belong to the Security Administrator role. Setting up a report against this metric will allow you to audit the current user list across all of your customers. Additionally, creating an Alert to use the "changed" condit...
Paul Taplett 3 months ago in Microsoft 365 0