1. A method of operating a computing device, comprising the acts of: monitoring operation of an application operating on the computing device to determine if the application crashes; in the event the application crashes, identifying a plurality of recent memory locations within a call stack; and determining if any of the identified memory locations correlate to code from a source other than a source of the application.