1. A system for handling an event in a computer system comprising: at least one computing device having software executing thereon that is configured to (a) suspend an occurrence of an event in a kernel-mode of an operating system running on said computing device; (b) cause the event to occur in a user-mode of the operating system; (c) determine if an occurrence of the event in the kernel-mode will compromise the computer system by analyzing the occurrence of the event in the user-mode; and (d) execute at least one security measure if it is determined that the occurrence of the event in the kernel-mode will compromise the computer system; wherein the security measure comprises denying an ability to write data to or read data from a file stored in a memory device of the computer system.