A lot of anticheats used to work similarly back in the day. They’d set SeDebugPrivilege, and arbitrarily scan memory and files, then offload that data to some s

A lot of anticheats used to work similarly back in the day. They’d set SeDebugPrivilege, and arbitrarily scan memory and files, then offload that data to some server. Truly behaving like malware. Edit: Nowadays they take it a step further, like Vanguard. It’s a boot kit that injects a kernel mode driver right at the beginning of OS initialization,