This is a part of Intel's firmware which prevents someone from tampering with the bios.

• Red: "Mark as fully in range" and "range.Type == PROTECTED_RANGE_INTEL_BOOT_GUARD_IBB"
• Cyan: "Mark as fully in range"
• Yellow: "Mark as partially in range"

• https://edk2-docs.gitbook.io/understanding-the-uefi-secure-boot-chain/secure_boot_chain_in_uefi/intel_boot_guard
• https://doc.coreboot.org/security/intel/acm.html
• https://github.com/LongSoft/UEFITool/blob/71a7336730c670258c2ad4d4a8620e0d61eb8929/common/ffsparser.cpp#L3744-L3754
• https://stackoverflow.com/a/61568389