Hackshield runs like Punkbuster, this his how it should work:
Real-time scanning of memory, a feature also prominent in many spyware programs, by Hackshield Client on players' computers searching for known hacks/cheats using a built-in database.
Throttled two-tiered background auto-update system using multiple Internet Master Servers to provide end-user security ensuring that no false or corrupted updates can be installed on players' computers.
Frequent status reports (encrypted) are sent to the Server by all players. When necessary, the Hackshield raises a violation which (depending upon settings) will cause the offending player to be removed from the game
Admins or (Game Admin, not Elites) can also manually remove players from the game for a specified number of minutes or permanently ban if desired.
Hackshield can be configured to instruct clients to calculate partial MD5 hashes of files inside the game installation directory. The results are compared against a set configuration and differences logged, and optionally, the client removed from the server.
Hackshield Admins can request actual screenshot samples from specific players and/or can configure the Servers to randomly grab screenshot samples from players during gameplay.
An optional "bad name" facility is provided so that Admins can prevent players from using offensive player names containing unwanted profanity or racial slurs.
Search functions are provided for Admins who wish to search player's keybindings and scripts for anything that may be known to exploit the game.
The Player Power facility can be configured to allow players to self-administer game servers when the Server Administrator (Elites/GM) is not present entirely without the need for passwords, in which the players can call votes to have a player removed from the server for a certain amount of time.
Originally Posted by shadowvolcan
