receiving, from an AV scanner, a request to scan a data source for malicious activity, wherein the data source comprises a plurality of files, and wherein the AV scanner has a plurality of compatible file types that the AV scanner is capable of scanning;

determining that the plurality of files are inaccessible to the AV scanner in response to determining that a file type of the data source is not in the plurality of compatible file types;

generating a file system corresponding to the data source by parsing contents of the data source using a software development kit (SDK) associated with the data source;

generating a virtual volume comprising a plurality of sparse files corresponding to the plurality of files in the data source;

populating at least one sparse file in the virtual volume with respective parsed content of a corresponding file in the data source; and

instructing the AV scanner to scan the virtual volume.