Many motherboards have an integrated chassis intrusion switch function to detect if the case has been opened. There is a related BIOS setting to enable/disable it.
I would like to view, in Windows, the current/previous states of the intrusion switch, to see if there has been an intrusion since I last checked.
I triggered a breach, which was detected (presumably by BIOS) on startup, but couldn’t see any results in the following:
- I have had a look at
ChassisBootupStatementioned in https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-computersystem , but it’s always
- Also, WMI
SecurityBreachis unset, and –>
dmidecodedisplays that there’s an intruder connector, but I don’t see its state; I just see that it exists. I found out about dmidecode from Chassis Intrusion API?
I can’t find any info online; does anyone know how to find these events?