1. One or more non-transitory tangible media encoding logic that include instructions for execution that, when executed by a processor, is operable to perform operations comprising: monitoring a first interface and a second interface at a first level for one or more predetermined activities associated with the second interface, wherein the monitoring includes directly monitoring the first interface and indirectly monitoring the second interface; identifying a first predetermined activity based on a callback for a calling code associated with the second interface, wherein the calling code is contained within a call frame of a call stack associated with the first interface; determining if a policy associated with the first predetermined activity indicates a second level of monitoring; and adjusting the monitoring from the first level to a second level if indicated by the policy.