Abstract: An agentless system and method of efficiently scanning a computer memory for compromised security in a virtualized computing environment is disclosed. By monitoring the access from virtual processing machines to a physical memory device, a list of the data blocks that have been altered since a last security scan is compiled. The system then uses that list to only scan altered data block in a subsequent security scan.