# Eac Usermode Telemetry Re

> EasyAntiCheat_EOS.exe / usermode telemetry RE: modules, IPC to driver, heartbeats, report formats, packing.

- Skill: `netvar1337/eac-usermode-telemetry-re` (Agent Skill)
- Install (CLI): `npx skillmds@latest add netvar1337/eac-usermode-telemetry-re`
- Raw SKILL.md: https://api.skillmd.com/api/skills/netvar1337/eac-usermode-telemetry-re/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- License: GPL-3.0-or-later
- Author: netvar1337 (https://skillmd.com/u/netvar1337)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/netvar1337/eac-usermode-telemetry-re

---


# EAC usermode telemetry RE

## Targets
- `EasyAntiCheat_EOS.exe` / service processes
- Game-side EAC modules
- IPC to kernel device

## Questions to answer
- What is enumerated each heartbeat?
- What is cached vs sent remote?
- How are integrity failures reported?
- Packer/protector layer (if any)

## Method
1. Snapshot imports/exports + sections
2. Hook/log outbound TLS (sizes, cadence) without needing full crypto break
3. Cross-ref IOCTL calls with driver RE
4. Diff versions after EAC updates

## Pair with
`eac-kernel-driver-re`, `eac-ban-stack`, `network-protocol-re`.

## Refs
- UC: EasyAntiCheat_EOS.exe usermode telemetry RE threads

