1. A method, comprising: identifying a module to be loaded; determining a fixed address in the virtual partition wherein a previous instance of the module was loaded at the fixed address; rebasing the module in a virtual partition to load at the fixed address, including: determining file information for the module; removing relocation data from the module; and modifying a header in the module to specify the fixed address; storing a hash of a page of memory associated with the fixed address after modifying the header; receiving in an external handler a notification associated with an event affecting the page; instructing an internal agent within the virtual partition to execute a task and return results based on the task to the external handler; and taking a policy action based on the results returned by the internal agent using the hash based at least upon the fixed address.