Liongard
Create
Home
Metrics Library
1003
Powered by Canny

Metrics Library

This is a community-led space where Liongard users can come to teach and learn from one another. Share custom Metrics, get inspired and see what’s trending in the Pride.
Active Directory: Last Login with Timestamp
This will return us the last logon for the AD user. Users[].join( , [join( , [ AD LOGIN: , to_string(UserName)]), join( , [ . Name of User: , to_string(Name)]),join( , [ : , to_string(LastLogonDate)])])
1
·
Active Directory
·
submitted
Active Directory: DHCP Percent In Use over 80
Name of DHCP in over 80% to be used for alerting DHCP.Serverv4Scopes[?Statistics.PercentageInUse >= to_number('80')].Name
1
·
Active Directory
·
submitted
Active Directory: User Accounts With Brute Force Attempts Not Disabled Count
Excluding disabled accounts helps with an accurate count of brute force accounts. Users[?AnomalousActivity.contains(@, Brute Force ) && UserStatus == Active ] | length(@)
0
·
Active Directory
·
submitted
Active Directory: Password Never Expires = TRUE
This is helpful to someone who's trying to obtain/maintain visibility into a part of the breakdown of an AD password policy at an organization. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. This Metric can also be used to create a pointed Actionable Alert that prompts the proper maintanence of a secure AD passpord policy. Users[? PasswordNeverExpires == true ].Name
0
·
Active Directory
·
submitted
Active Directory: Summary of Enabled Group Policies
This metric will list all of the enabled group policies when applied to an Active Directory inspector. It will also return the following:Is the policy is detached (T/F)Is the policy enabled for users (T/F)Is the policy enabled for computers (T/F) GroupPolicyDetails[].['"Name" ='Name,'"Detached Policy" ='Detached,'"Enabled for Users" ='UserEnabled,'"Enabled for Computers" ='ComputerEnabled]
0
·
Active Directory
·
submitted
Active Directory: Password Not Required Users
Identifying any users who's AD account is set to not require a password. Users[?PasswordNotRequiredt== true ].DisplayName || to_array( - ) | join( , , @)
0
·
Active Directory
·
submitted
Active Directory: Count of Users Assigned to Group(s)
Returns the number of users assigned to a group. Groups[?contains(CN, 'InsertGroupName')].MembersList[] | length(@)
0
·
Active Directory
·
submitted
Active Directory: List of Enabled Group Policies
This metric will list the applied GPO's from an Active Directory server GroupPolicies[].[DisplayName,GpoStatus]
0
·
Active Directory
·
submitted
Active Directory: Stale Privileged Account Summary
Summarizes the privileged users who haven't logged in recently. Useful for alert comments or a report. Users[?UserActivity== Stale && DefaultSystemUser== false && Enabled == true && Privileged== Yes ].join( , , [join( : , [ Username , to_string(UserName)]), join( : , [ Day since last login , to_string(DaysSinceLastLogin)])])
0
·
Active Directory
·
submitted
Active Directory: Groups w/ Users
This is helpful to someone who's trying to obtain/maintain visibility into the groups at an organization and which users are a part of them. This is a good Metric for QBRs or recurring site reviews. Also, this Metric could be used to build a user audit with the intention of an end customer confirming that all looks as expected. Groups[].join( , [join( , [ , to_string(Name)]), join( , [ : , to_string(MembersStr)])])
0
·
Active Directory
·
submitted
Load More
→
Powered by Canny