DET-H2: Firmware, microcode or VBIOS changed¶
The reported TCB (bootloader, TEE, SNP firmware, microcode) or the GPU driver or VBIOS version changed between verified reports.
| Property | Value |
|---|---|
| Severity | medium |
| Platform | Hardware fleets |
| Group | hardware |
| Log source | Collector · SEV-SNP report / NVIDIA NRAS |
| Related check | SNP-TCB-01: Reported TCB meets the fleet's minimum |
Fires when¶
reported firmware / microcode / VBIOS (TCB) changed versus the previous report
How it runs¶
The hosted service evaluates this rule on what enrolled collectors report and on key-release decisions. There is nothing to run; see Enroll a collector.
A match appears in the console as a detection with this rule's ID and triggers your alerts; see Runtime detections.