1. A method, comprising: rebasing a module in a virtual partition to load at a fixed address; storing a hash of a page of memory associated with the fixed address; receiving in an external handler a notification associated with an event affecting the page; instructing an internal agent within the virtual partition to execute a task and return results based on the task to the external handler; and taking a policy action based on the results returned by the internal agent.