The concepts and technologies disclosed herein are directed, in part, to a system that can monitor traffic traversing a virtualized network that includes a plurality of virtual network functions (“VNFs”) that provide, at least in part, a service. The system can capture an event from the traffic. The event can involve at least one VNF, and can negatively affect at least one operational aspect of the virtualized network in providing the service. The system can create snapshot that represents a network state of the virtualized network during the event. The system can create, based upon the snapshot, a shadow network. The shadow network can include a network emulation of the network state of the virtualized network during the event. The system can determine, from the shadow network, at least one modification to at least a portion of the virtualized network that would at least mitigate negative effects of the event.