Rainbow Six Siege

Rainbow Six Siege is a tactical 5v5 attacker-versus-defender shooter from UbisoftPublisherUbisoftUbisoft is the publisher of Rainbow Six Siege, For Honor, and other multiplayer titles, and of XDefiant until its servers closed in June 2025. Its competitive games rely on BattlEye and Easy Anti-Cheat for kernel-mode protection, and in August 2026 it said a dedicated Ubisoft Security team is building a shared kernel-level anti-cheat for all its games, with Rainbow Six Siege among the first.2 games in this family → Montreal, released in December 2015. It runs on AnvilNext 2.0EngineAnvilNext (Ubisoft)AnvilNext is Ubisoft's proprietary engine, used in Rainbow Six Siege, For Honor, the Assassin's Creed series, and other Ubisoft titles. AnvilNext 2.0 is the version powering Siege.1 game in this family → with Ubisoft's RealBlast destruction layer, which is what gives the breach-and-clear loop its signature feel: walls open up, floors give way, and a round can pivot on a single shaped charge. Operators, maps, and economy have been reworked across roughly a decade of seasonal content, and the game now sits under the Siege X umbrella as its long-running live service.

The kernel driver is loaded only while Siege is running, but the BattlEyeAnti-cheatBattlEyeBattlEye is the kernel anti-cheat from BattlEye Innovations GmbH (Reutlingen, Germany), founded 2004. One of the longest-running kernel anti-cheats in PC gaming. The kernel driver (bedaisy.sys) and user-mode service (BEService.exe) are both catalogued in the Field Guide.8 games in this family → service stays installed across reboots until you remove it. To remove it, run Uninstall_BattlEye.bat from the game's BattlEye folder before deleting the game; if the folder is gone, run sc delete BEService from an administrator command prompt, unless another BattlEye game still needs it. Reinstalling later will recreate everything cleanly.

Siege ships with BattlEye, a kernel-mode anti-cheat. The kernel driver (bedaisy.sysDriverbedaisy.sysBattlEye kernel-mode minifilter driverOpen plate →, catalogued in the drivers section) is loaded on demand by the BattlEye service when a protected game launches and unloads when the game exits, so it is not resident at boot. The user-mode pieces are BEService.exe (the Windows service that brokers communication with the driver, which BattlEye says runs only while a protected game is played) and BEClient.exe (the per-game client that runs alongside RainbowSix.exe). Both are catalogued in the Field Guide's processes section; the broader picture lives under the battleye anti-cheat family. After uninstall, the BattlEye service can persist if the game folder is removed before its uninstaller runs; BattlEye publishes an uninstall script for a clean exit. Two changes are announced. On August 7, 2026, Ubisoft said a dedicated Ubisoft Security team is building "a kernel level, shared anti-cheat solution across all Ubisoft games," with Siege among the first to incorporate it from Season 3, and that its R6 Shieldguard Secure Platform for Legend Division rests on Secure Boot, VBS and Core Isolation, and TPM: "To take part, players need to enable Core Isolation in Windows Security, and some may need to upgrade their firmware to allow Secure Boot and TPM to run effectively."

Ubisoft has leaned hard into automated enforcement on Siege, and that posture has cut both ways. In 2018 and again in early 2019, players reported false BattlEye bans tied to Siege's automation, including a January 2019 wave where accounts were suspended for being boosted by a cheater simply for having shared a lobby with someone later flagged. Beyond BattlEye, Ubisoft has layered its own systems on top: a custom binary-hardening pipeline called the QB System that distributes varied game executables to frustrate tampering, and MouseTrap on consoles to detect mouse-and-keyboard spoofing. Ubisoft has also pursued legal action against DDoS-for-hire operators that targeted Siege ranked play in 2019.