Blocking Attacks in Runtime with Drift Prevention

**Executive summary:** Drift Prevention, as presented in this document, is a cloud-native security control (implemented by Aqua CSP) that enforces workload immutability by detecting and blocking any executables that were not part of the original image at deployment; this deterministic approach prevents runtime code injection, zero-day exploit payloads, and insider changes (illustrated by stopping a downloaded crypto miner) while providing telemetry for investigation.