In this demo, we will present a fileless malware scenario against cloud-native and Kubernetes environment and how Armo Workload Fabric runtime protection can protect against it using in-memory protection and Kubernetes secrets encryption.