Metrics Library

Looks for applications with expiring/expired secrets (within 30 days), then outputs the Application name, and the secrets associated that are expiring/expired. Applications[?passwordCredentials[?time_until(endDateTime, days ) < 30 ].endDateTime].['Application Name: 'displayName, 'Secret Name: 'passwordCredentials[?time_until(endDateTime, days ) < 30 ].displayName]

Microsoft 365 Licensing Metric designed for Power BI consumption. Licensing[].{ProductFriendlyName: ProductFriendlyName, Consumed: consumedUnits, Unconsumed: UnconsumedUnits_r, Suspended: prepaidUnits.suspended}

The resulting example in the screenshot drives[? ( quota.total != null)].[{"Drive Name": name, "GB Total": quota.total , "Site Name": siteName_r}]

This will find any SSO certificates that are going to expire in 30 days or less. ServicePrincipals[?preferredTokenSigningKeyEndDateTime != null && time_until(preferredTokenSigningKeyEndDateTime, days ) < 30 ].displayName

Per ( https://help.duo.com/s/article/3670?language=en_US ) duo support users are billed unless they are in the Trash or a Pending Delation Status. The above metric will return a list of users excluding those with the pending deletion status.If you are looking to display the count versus the list you can use this metric:Users[?!contains(status, pending deletion )] | length(@) Users[?!contains(status, pending deletion )].join( : , [username,status]) | sort(@)

Counts the number of days since the last Azure Active Directory Connect (AADC) sync. Useful for determining if there is an issue as it should always be <1. SystemInfo.DirectorySync[?DaysSinceLastSync_r > 0 ] | length(@)

Total Count of Sentinel One Agents Agents[]| length(@)

Generates a list of hostnames that are non-compliant with the Windows Defender policy. Agents[?defender_policy_status == 'Non Compliant'].hostname

Generates a count of hostnames that are non-compliant with the Windows Defender policy. length(Agents[?defender_policy_status == 'Non Compliant'])

This metric will assess whether your workstations are compatible with the upgrade to Windows 11. contains(OS.OperatingSystemName, Microsoft Windows 10 ) && OS.Windows11Compatible == false && No || Yes