DET-H7: BIOS setting changed¶
A BIOS attribute changed between snapshots. Events that turn off Secure Boot, the TPM, TXT, SME/SEV, TDX or the IOMMU are raised as high.
| Property | Value |
|---|---|
| Severity | medium |
| Platform | Hardware fleets |
| Group | hardware |
| Log source | Collector · Redfish (BMC) |
| Related | BIOS settings |
Fires when¶
a BIOS attribute (Secure Boot / TPM / boot) changed between Redfish snapshots
How it runs¶
The hosted service evaluates this rule on what enrolled collectors report and on key-release decisions. There is nothing to run; see Enroll a collector.
A match appears in the console as a detection with this rule's ID and triggers your alerts; see Runtime detections.