Hooking specific engine calls to monitor CPU cycle behavior and frame timing.
Modern anti-cheat software (like Easy Anti-Cheat, BattlEye, or Vanguard) runs at the kernel level (Ring0). For an injector to work, it must disable or bypass this protection. To do this, likely distributes rootkits or vulnerable drivers. trick injector.com