Alibi

Someone thinks you're cheating. You know you're not. Alibi helps you prove it.

You run one scan — right-click, wait a couple of minutes — and four files land on your Desktop: two plain-text reports and two visual HTML versions of the same thing. Send them to whoever asked: the tournament admin, the Discord mod, the lobby that called you out. That's the whole flow.

Under the hood it's a read-only forensic kit for Windows: it looks at your machine the way an investigator would and writes down what it finds, without changing anything. No install, no account, no telemetry — nothing about your PC leaves your PC. The one optional network call (downloading a public driver-safety list) asks permission first and is disclosed in every report.

Primarily built for Call of Duty, but the same engine covers CS2, Apex, Tarkov, Rust, R6, and Marvel Rivals.

Author: Bread — Activision ID Bread#3266221, GitHub @Sutaigne.

---

Quick start

1. Get the kit: download alibi.zip from the latest release, then unzip it. (Use this built kit — not GitHub's "Download ZIP", which includes developer-only folders.)
2. Right-click Run scan.bat → Run as administrator.
3. Click YES on the UAC prompt and wait ~2–3 minutes.
4. Collect the four output files from your Desktop and send the ones with findings.

New here? Read START HERE.txt first.

Why two scans?

Mode	Looks at your PC as…	Detects
PC	a PC gamer's machine	PC cheats, DMA artifacts, HWID spoofers
Console-rig	a PC wired into a console rig	capture-card software, vision aimbots, XIM/Cronus/ReaSnow adapters

Running both covers every scenario this PC could be involved in. If you only play one way, the other report will be CLEAN — that's expected. The relevant report is the one with findings.

Verdict tiers

Mode	Verdicts
PC	CHEATS DETECTED / INPUT DEVICES DETECTED / UNSURE / CLEAN
Console-rig	MITM CHEAT STACK DETECTED / CAPTURE STACK PRESENT / UNSURE / CLEAN

What it looks like

Every scan writes a self-contained _visual.html next to the .txt report — verdict banner, recent-findings breakdown, a named "why this verdict" list, a log-scale recency timeline, and a per-scanner category signal map. No external assets; it works offline.

🔴 PC — CHEATS DETECTED

🟡 Console-rig — CAPTURE STACK PRESENT

🟢 PC — CLEAN

Live, interactive example reports (full HTML, no download) are hosted at sutaigne.github.io/alibi — synthetic data rendered in the report's real layout. The hosted examples may lag the newest release.

Safety in one line

Every scan is read-only. Nothing leaves your machine. Every script under alibi-engine/scanner/ is plain text you can open and read. Search for Invoke-Web and you'll find exactly one result — the opt-in LOLDrivers fetch. Search for Remove-Item or Set-Item and you'll find none in the scan path.

Documentation

Doc	For
alibi-engine/README.md	Full technical README — what it detects, auditability, project history
docs/for-reviewers.md	Reviewer guide — someone handed you a report and wants you to trust it
SECURITY.md	Disclosure policy + antivirus / SmartScreen false-positive explanation
HASHES.txt	Verify the kit you received matches this repo: sha256sum -c HASHES.txt

If your browser blocks the download as a virus: that's a known SmartScreen/AV false positive — an anti-cheat scanner ships the exact keyword patterns AV hunts for. Every file is plain readable source; verify against HASHES.txt or upload the ZIP to VirusTotal. Full explanation in SECURITY.md.

Requirements

• Windows 10 or 11
• Administrator (UAC) — without it, the scan loses access to Prefetch, BAM, USB history, driver-signing flags, ShimCache, and the full process module list
• ~1 MB free disk space; no internet needed for the core scan

License

MIT — see LICENSE. Free to read, run, fork, redistribute.