The advanced threat detection and prevention capability can help detect threats and mitigate risks during runtime on cloud workloads. It creates behavior models based on workload activities, identifies abnormal behaviors, and responds with rules to mitigate potential threats. It also provides robust monitoring and blocking features to protect against intrusion attacks such as abnormal logins, reverse shells, webshells, and local privilege escalation. It delivers advanced Anti-virus capabilities to add an extra layer of security to the cloud environment.