EAC usermode telemetry RE
Targets
EasyAntiCheat_EOS.exe/ service processes- Game-side EAC modules
- IPC to kernel device
Questions to answer
- What is enumerated each heartbeat?
- What is cached vs sent remote?
- How are integrity failures reported?
- Packer/protector layer (if any)
Method
- Snapshot imports/exports + sections
- Hook/log outbound TLS (sizes, cadence) without needing full crypto break
- Cross-ref IOCTL calls with driver RE
- Diff versions after EAC updates
Pair with
eac-kernel-driver-re, eac-ban-stack, network-protocol-re.
Refs
- UC: EasyAntiCheat_EOS.exe usermode telemetry RE threads