1. A system, comprising: an operating system to perform operations on the system; a storage device to communicate with the operating system, the storage device comprising, memory including configurable secure storage; firmware to provide features for protection against malware by allowing configuration of unused space at an end region near an end of the memory to redirect access to a configurable secure storage and monitoring activity or restriction of activity in the secure storage based upon an determination of suspicious activity; and a controller to execute the firmware; a secure log to record activity of the system, wherein the secure log is accessible by an authenticated external entity to determine when the activity recorded in the log is suspicious.