The report 'Chassis: Intrusion detected' will show assets that have a ChassisBootupState with a value higher than '3', meaning either a 'Warning' (4), 'Critical'(5) or 'Nonrecoverable'(6). This information is gathered from the Win32_ComputerSystem WMI class.