protect Runtime detection Falco Runtime security: detects anomalous syscalls and Kubernetes events in real time.