Detection and running on access. Not only on demand like Sandboxie.