What We Detect
Executors & Menus
Detect cheat executors and external menu loaders through memory signatures, prefetch records, and shimcache entries.
Injectors & Loaders
Identify DLL injectors, manual mapper artifacts, and shellcode loaders left in process memory and BAM registry.
Bypass & Cleaner Tools
Surface evidence of anti-cheat bypass tools and forensic cleaners that attempt to erase execution history.
Anti-Forensic Techniques
Detect timestomping, log deletion, journal manipulation, and other techniques used to cover execution tracks.
HWID Spoofer Artifacts
Uncover hardware ID spoofing tools through driver remnants, registry modifications, and SMBIOS tampering traces.
DMA & Kernel Drivers
Flag direct memory access devices and unsigned kernel-mode drivers via driver load events and PCI device history.
See It In Action
Live AC vs Forensic Check
| Capability | Live Anti-Cheat | Forensic Check |
|---|---|---|
| Deleted File Evidence | ✗File gone = no trace | ✓USN Journal records deletion |
| Cleaner Tool Detection | ✗Runs before AC sees it | ✓Prefetch + BAM artifacts remain |
| HWID Rotation | ✗New hardware ID = new player | ✓Spoofer driver remnants detected |
| Timestomping | ✗Fake timestamps bypass checks | ✓MFT vs shimcache delta detected |
| DMA Attack Devices | ✗External hardware, undetectable | ✓PCI device & PCILeech fingerprint |
| Unsigned Kernel Drivers | ✗User-mode AC can't read kernel | ✓Driver load events in Event Log |
| USN Journal Tampering | ✗Journal cleared = silent | ✓Absence itself flagged as suspicious |
How It Works
Admin Generates PIN
From the dashboard, the admin generates a unique 6-digit PIN. Each PIN is valid for 30 minutes and single-use — it expires immediately after the scan completes.
Send to Suspect
The admin sends the download link and the PIN directly to the suspect player over Discord or in-game. No account required on the suspect's end.
Results Appear Instantly
The suspect runs the .exe, enters the PIN, and forensic data is collected and uploaded. Results appear in the admin's dashboard within seconds — fully analyzed.
Choose Your Plan
Want to buy? Join our Discord and open a ticket.
- ✓Unlimited scans
- ✓Full detection suite (12,400+ rules)
- ✓Prefetch, BAM, Registry, USN
- ✓All artifact layers — DMA, Kernel, LSASS
- ✓Scan results dashboard
- ✓Priority support
- ✓Unlimited scans
- ✓Full detection suite (12,400+ rules)
- ✓Prefetch, BAM, Registry, USN
- ✓All artifact layers — DMA, Kernel, LSASS
- ✓Scan results dashboard
- ✓Priority support
- ✓Unlimited scans
- ✓Full detection suite (12,400+ rules)
- ✓Prefetch, BAM, Registry, USN
- ✓All artifact layers — DMA, Kernel, LSASS
- ✓Scan results dashboard
- ✓Priority support