> For the complete documentation index, see [llms.txt](https://easyauth.papelship.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://easyauth.papelship.com/csharp-document/remote-settings/qpanalyzer.md).

# qPAnalyzer

qPAnalyzer is an AI-powered runtime defense plugin designed to detect memory scanners, debuggers, and custom reverse engineering tools running on the client machine.

Unlike traditional static detection methods that only look for known file names, qPAnalyzer identifies tools dynamically even if they are renamed, packed, or custom-compiled.

***

## Key Capabilities

* **Memory Scanner Detection**: Identifies memory editors and scanning tools (Cheat Engine forks, trainers, memory dumpers) running in the background.
* **Custom Tool Recognition**: Uses AI-assisted visual analysis to detect proprietary cracking tools regardless of process or window titles.
* **Zero False-Positive Protection**: Ignores standard user applications, web browsers, file managers, and text editors.
* **Continuous Background Monitoring**: Periodically evaluates the environment while the protected application is active.

***

## C# Implementation

{% tabs %}
{% tab title="Enable in Application" %}

```csharp
using System;
using qPapelEasyAuth;

public class SecuritySetup
{
    public static void EnableAiProtection()
    {
        // Enable qPAnalyzer AI plugin
        qPapelEasyAuth.qPapelEasyAuth.EnablePlugin("qpanalyzer");

        Console.WriteLine("[+] qPAnalyzer AI runtime defense enabled.");
    }
}
```

{% endtab %}

{% tab title="Remote Configuration" %}
qPAnalyzer behavior (inspection policy, scan intervals, delay modes) can also be controlled remotely from the EasyAuth Web Dashboard without needing to recompile the client application.
{% endtab %}
{% endtabs %}

***

## Response Actions

When an active reversing tool or memory scanner is detected, the system applies the policy configured for the product:

| Policy            | Behavior                                                                     |
| ----------------- | ---------------------------------------------------------------------------- |
| **Strict Mode**   | Flags the threat, bans the device HWID, and terminates the application.      |
| **Tolerant Mode** | Closes the protected application gracefully without issuing a permanent ban. |

{% hint style="info" %}
qPAnalyzer runs in lightweight background threads and has minimal impact on game or application performance.
{% endhint %}