Here is what I worked on the last weeks, I waited for the 5.2 to release it.
This is simply a website showing the Warden activity, with an open API for developpers to protect their hacks.
It currently have few scans handled, I'm still reversing the Warden module to monitor more, will add the hash region soon, looking forward to the MPQ / LUA scan too, but I don't see any of them (according to the WARDEN_DATA packet).
You can also download raw Warden module, dumped as sent by the server.
Feel free to use it, or not
Thanks to MaiN to pointing me out about the heuristic idea![]()