Hmm I wonder how intrusive EAC is on Linux, and Macs. I seem to recall that they look for visiting blacklisted websites in some browsers a while back. Also I wonder how their VM detection is for linux, and macs.
I know that it can checksum files, search through drivers, scan memory addresses, etc. I think I can read registry keys as well. That’s just what I know of the 2005-2008 era of Warden implementation. See vanilla implementation: https://github.com/vmangos/core/pull/1295
