Protecting a desktop build (Pro)
Goal: You will learn how to notice a mod loader, a debugger, or a virtual machine on Windows, macOS, and Linux.
The problem
On desktop, a player can attach a debugger and change values, load a mod loader that runs extra code, or run the game inside a virtual machine so it is easier to inspect or automate.
Many of these tools attach before your scripts run. AntiCheat cannot block them. It can notice them so you can react.
The solution
Three detectors cover this. Mod loader and virtual machine are already on the Anti Cheat Monitor prefab. Add DebuggerDetector yourself. It has no prefab.
Open Edit > Project Settings > GuardingPearSoftware > AntiCheat and use the Desktop tab.
Note
Verify development builds is off by default. While it is off, these checks skip the Editor and development builds. The Editor itself can look like a debugger, so leave this off while you work.
Step 1: Debuggers
A debugger can pause the game and change values.
Desktop debugger settings.
Add the DebuggerDetector component under the AntiCheat-Monitor. On this tab, turn on the debugger checks you want.
A normal attached debugger is reported on Windows, macOS, and Linux. A deeper system debugger is reported with a higher score, and that check is clearest on Windows.
Details: Debugger.
Step 2: Mod loaders
Loaders such as BepInEx, MelonLoader, and Unity Doorstop can load extra code into the game.
Mod loader settings.
The Desktop Mod Loader Detector is already on the monitor prefab. The Desktop tab lists the names it looks for. You can add your own.
Details: Mod loader.
Step 3: Virtual machines
A virtual machine can be VMware, VirtualBox, Hyper-V, QEMU, Parallels, or a similar host. The detector checks network adapter addresses, BIOS text, and other signs of a virtual machine. Some of those signs are only available on some systems.
Virtual machine settings.
The Desktop Environment Cheating Detector is already on the monitor prefab. You can add your own address or text entries on the Desktop tab.
Warning
Developers, testers, and cloud players often use a virtual machine on purpose. Do not close the game on this check alone. Flag the session, or use a soft reaction.
Details: Virtual machine.
The result
A found debugger or mod loader raises the threat score. A virtual machine does too, but treat that one as a maybe, not as proof.