1. A system for electronic security, comprising: a memory; a security agent configured to: identify an attempted access of a resource of an electronic device, the attempted access comprising: attempting to write instructions to the memory; attempting to execute the instructions; and attempting to access a memory page data structure entry for software; determine that the malware status of the software is unknown; trap the attempted access based upon identifications of the attempt to write instructions to the memory, attempt to execute the instructions, the attempt to access the memory page data structure entry for the software, and upon a determination that the malware status of the software is unknown; and access one or more security rules to determine whether the attempted access is indicative of malware.