DET-H5: Host fell out of date after a vendor change¶
An unchanged host stopped meeting its TCB or RIM requirements because the fleet minimum was raised after an advisory or NVIDIA withdrew a RIM.
| Property | Value |
|---|---|
| Severity | high |
| Platform | Hardware fleets |
| Group | hardware |
| Log source | Fleet policy / AMD KDS / NVIDIA RIM |
| Related check | SNP-TCB-01: Reported TCB meets the fleet's minimum |
Fires when¶
reported TCB below the minimum after a vendor TCB change
How it runs¶
The hosted service evaluates this rule on what enrolled collectors report and on key-release decisions. There is nothing to run; see Enroll a collector.
A match appears in the console as a detection with this rule's ID and triggers your alerts; see Runtime detections.