I know Norman uses the code emulation technology that Vlk pointed out. Norman calls it Norman sandbox technology.
P.S. Any sneakpeaks on the features for the next major? Anything to improve detection?