GCP Confidential VM and Compute Engine Capability Group

All Mappings

Capability ID Capability Description Category Value ATT&CK ID ATT&CK Name Notes
confidential_vm_and_compute_engine Confidential VM and Compute Engine protect significant T1565.003 Runtime Data Manipulation
Comments
Main memory encryption is performed using dedicated hardware within the memory controllers. Each controller includes a high-performance Advanced Encryption Standard (AES) engine. The AES engine encrypts data as it is written to DRAM or shared between sockets, and decrypts it when data is read.
References

Capabilities

Capability ID Capability Name Number of Mappings
confidential_vm_and_compute_engine Confidential VM and Compute Engine 1