1. A method, comprising: receiving in an external handler an event notification associated with an event in a virtual partition; instructing a helper agent within the virtual partition to execute a task and return results based on the task to the external handler; and taking a policy action based on the results returned by the helper agent.