Tier 1Quick triage · 5–10 min · 37 methods

Foundation

PC checking (also called a screenshare or SS) is a forensic-style review of a computer to determine cheat usage. Tier 1 covers the standard artifact set every check should walk: where Windows leaves footprints of execution, persistence, file activity and user behaviour, even after the cheat itself is gone.

T1

Info

2
T1

Tool Downloads

3
T1

Execution Artifacts

5
T1

Logs & Events

2
T1

File System

6
T1

User Activity

4
T1

Registry

1
T1

Persistence & Services

3
T1

Live System

4
T1

Network & Devices

2
T1

Advanced

4
T1

Tools

1

The Golden Rule, Tier 1

No single artifact tells the whole story. Cross-reference EVERYTHING. Timeline it. Correlate it. Trust the pattern.

Next

Tier 2 · Advanced

Season's greetings from the research desk

Thanks for reading

Every case on this site was worked by people who would rather be by the fire. Stay safe, keep your servers clean, and have a warm, quiet season.

The Clubhouse AC research team

To: you, wherever you are reading this