Abusing xhunter1.sys — How I Used XIGNCODE3's Own Driver Against Other Games

XIGNCODE3 loads a kernel driver with commands to open handles and read/write any process. Here's how I found it and used it against EAC and BattleEye protected games without getting banned.

Gepard Shield Analysis: KiUserExceptionDispatcher Hook Check

How Gepard Shield hooks KiUserExceptionDispatcher to intercept debugger activity, and how its periodic byte check detects when the hook has been removed.