You can enable the Shielded VM service on your Compute Engine VMinstances to help defend against rootkits and bootkits. Shielded VMleverages advanced platform security capabilities such asSecure Boot,Virtual trusted platform module (vTPM)-enabledMeasured Boot, andIntegrity monitoring.

For a more detailed overview, seeKey concepts for Shielded VM.

To get started using Shielded VM, try thequickstartor seeModifying Shielded VM options.

You can monitor the integrity of your Shielded VMs in some of thefollowing ways:

• You can useCloud Monitoring tomonitor the boot integrity ofShielded VM instances. Next, you can identify the cause of an integrityvalidation failure, and update the integrity policy baseline accordingly.

• You can alsouse a Cloud Run functions trigger to automatically acton integrity monitoring events.