Skip to content

DET-H3: Debug or devtools mode appeared

A guest policy now allows DEBUG or a migration agent, or a GPU reports debugging or CC devtools mode.

Property Value
Severity critical
Platform Hardware fleets
Group hardware
Log source Collector · SEV-SNP report / NVIDIA NRAS
Related check SNP-POL-01: Guest policy forbids debug and migration agents

Fires when

SNP policy allows DEBUG OR devtools/debug mode present

How it runs

The hosted service evaluates this rule on what enrolled collectors report and on key-release decisions. There is nothing to run; see Enroll a collector.

A match appears in the console as a detection with this rule's ID and triggers your alerts; see Runtime detections.