Sonoma security: “sea change from largely static detection and protection to those based more on behaviours”