1. A method, comprising: proactively monitoring activity of a networked computing device in real-time; in response to monitoring the activity of the networked computing device, determining that potential malware has been received at the networked computing device; and in response to determining that potential malware has been received at the networked computing device, placing the potential malware into an isolation hypervisor for analysis.