Anti-cheat bypass research
Map the AC
- User-module vs kernel driver vs hypervisor
- Heartbeat/tick, screenshot, handle stripping, callback spam
- Window/overlay detection, input injection detection
Approach
- Inventory modules/drivers; note protect level
- Trace integrity checks (code, memory, env)
- Prefer HV/read-only external first when less noisy
- Build detection test harness before exploit chain
Pair with
game-hacking, stealth-injectors, stealth-hypervisor, windows-internals.