drop easyanticheat / battleye log dir · parse violation events + cheat tool signatures · runs locally
EasyAntiCheat · BattlEye · violation events · blocked modules · cheat signatures
heuristic screener · parses artifacts locally · not definitive proof