Rainbow Six Siege

Rainbow Six Siege is a tactical 5v5 attacker-versus-defender shooter from UbisoftPublisherUbisoftUbisoft is the publisher of Rainbow Six Siege, For Honor, XDefiant, and other multiplayer titles. Its competitive games rely on BattlEye and Easy Anti-Cheat for kernel-mode protection.1 game in this family → Montreal, released in December 2015. It runs on AnvilNext 2.0EngineAnvilNext (Ubisoft)AnvilNext is Ubisoft's proprietary engine, used in Rainbow Six Siege, For Honor, the Assassin's Creed series, and other Ubisoft titles. AnvilNext 2.0 is the version powering Siege.1 game in this family → with Ubisoft's RealBlast destruction layer, which is what gives the breach-and-clear loop its signature feel: walls open up, floors give way, and a round can pivot on a single shaped charge. Operators, maps, and economy have been reworked across roughly a decade of seasonal content, and the game now sits under the Siege X umbrella as its long-running live service.

The kernel driver is loaded only while Siege is running, but the BattlEyeAnti-cheatBattlEyeBattlEye is the kernel anti-cheat from BattlEye Innovations GmbH (Reutlingen, Germany), founded 2004. One of the longest-running kernel anti-cheats in PC gaming. The kernel driver (bedaisy.sys) and user-mode service (BEService.exe) are both catalogued in the Field Guide.5 games in this family → service stays installed across reboots until you remove it. If you uninstall the game by deleting the folder, BattlEye's uninstall script clears the leftover service. Reinstalling later will recreate everything cleanly.

Siege ships with BattlEye, a kernel-mode anti-cheat. The kernel driver (bedaisy.sysDriverbedaisy.sysBattlEye kernel-mode minifilter driverOpen plate →, catalogued in the drivers section) is loaded on demand by the BattlEye service when a protected game launches and unloads when the game exits, so it is not resident at boot. The user-mode pieces are BEService.exe (the always-resident Windows service that brokers communication with the driver) and BEClient.exe (the per-game client that runs alongside RainbowSix.exe). Both are catalogued in the Field Guide's processes section; the broader picture lives under the battleye anti-cheat family. After uninstall, the BattlEye service can persist if the game folder is removed before its uninstaller runs; BattlEye publishes an uninstall script for a clean exit.

Ubisoft has leaned hard into automated enforcement on Siege, and that posture has cut both ways. In 2018 and again in early 2019, players reported false BattlEye bans tied to Siege's automation, including a January 2019 wave where accounts were suspended for being boosted by a cheater simply for having shared a lobby with someone later flagged. Beyond BattlEye, Ubisoft has layered its own systems on top: a custom binary-hardening pipeline called the QB System that distributes varied game executables to frustrate tampering, and MouseTrap on consoles to detect mouse-and-keyboard spoofing. Ubisoft has also pursued legal action against DDoS-for-hire operators that targeted Siege ranked play in 2019.