1. A non-transitory computer readable storage medium having stored thereon logic that, upon execution by one or more processors implemented within a network device, performs operations comprising: launching, by an actuation logic, an object within a virtual run-time environment to detect a presence of malware or the object is part of a malicious attack; and selecting, by a control logic, one or more simulated user interactions with the object based on, at least in part, data within metadata associated with the object, the data identifying at least an object type corresponding to the object launched by the actuation logic.