1. A computer-implemented method, comprising: defining, by a processor, a code fingerprint by obtaining parameters describing at least one of an event type or an event, wherein the code fingerprint comprises a first sequence; loading, by the processor, the code fingerprint into a first register accessible to the processor, wherein the first register comprises an initial code fingerprint comprising an initial code sequence; concurrent with the loading the code fingerprint into the first register accessible to the processor, loading, by the processor, the initial code fingerprint into an historical register; concurrent with executing a program, obtaining, by the processor, the code fingerprint from the first register; identifying, by the processor, the code fingerprint in the program by comparing a second sequence in the program to the first sequence; and based on the identifying, alerting, by the processor, a runtime environment, wherein the program is executing in the runtime environment.