What is runtime detection and response in Container Security?

Runtime container security monitors workload behavior for suspicious processes, file changes, network activity, or privilege use. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.