1. A method of reducing an amount of actions performed based on a trust relationship state between objects, the method comprising: establishing a first trust state for a first object, comprising: scanning the first object for malware; maintaining an attribute for the first object related to the established first trust state; monitoring activity related to the first object and a second object; updating the attribute of the first object based at least in part upon a second trust state associated with the second object; determining not to perform a scan operation on the first object based upon the updated attribute when the first trust state and the second trust state indicate that the first object and the second object are both trusted; and determining to perform a scan operation on the first object after updating the first trust state or the second trust state to indicate either the first object or the second object is untrusted.