What Still Works After an Attacker Attaches to Your Process
An in-process check can still be useful after the process is instrumented. What it observes, what it costs an attacker, and how much should depend on it.
#Reverse Engineering
Encrypting IL2CPP Metadata: What It Changes and What It Doesn't
Encrypting global-metadata.dat blocks off-the-shelf dumpers but not runtime instrumentation. What that trade actually costs a Unity team, and when it pays off.