1. At least one non-transitory machine readable medium including code for execution that, when executed by one or more processors, is to: use an access code to gain access to a monitored process in a virtual partition of a virtualized platform; create a memory region within the monitored process; insert an embedded component into the memory region; send, to an external handler configured to operate externally to the virtual partition, an event notification indicating an event associated with the monitored process; perform a first task communicated by the embedded component in the monitored process to suspend a first thread of the monitored process; execute, by a second thread in the virtual partition, a second task to identify context information associated with the event; send, from the virtual partition, the identified context information to be evaluated; and take an action based, at least in part, on an evaluation of the identified context information.