1. A method comprising: intercepting an object provided from a first digital device to a second digital device; instantiating a virtualization environment with the one or more resources; processing the object within the virtualization environment; tracing operations of the object while processing within the virtualization environment; detecting suspicious behavior associated with the object in the virtualization environment; instantiating an emulation environment in response to the detected suspicious behavior; processing the object within the emulation environment; recording responses to the object within the emulation environment; tracing operations of the object while processing within the emulation environment; detecting a divergence between the traced operations of the object within the virtualization environment to the traced operations of the object within the emulation environment; re-instantiating the virtualization environment in response to the detected divergence; providing the recorded response from the emulation environment to the object in the re-instantiated virtualization environment; monitoring the operations of the object while processing within the re-instantiation of the virtualization environment; identifying untrusted actions from the monitored operations; and generating a report regarding the identified untrusted actions of the object.