This hands-on workshop introduces participants to real-world cloud-native threat detection using Falco, the CNCF’s open-source runtime security project. Attendees will learn how Falco monitors system, container, and Kubernetes activity to uncover anomalous or malicious behavior in real time. Through guided exercises, they will configure rules, explore alerts, and gain practical skills to strengthen runtime security in modern Kubernetes environments.