The state of the art is pretty boring and you can learn about user command payloads in an afternoon.

The world is much more complex now that YOLO-based aimbots exist, and I think the real answer is that anti-cheats are now defeatable, period.

You can craft a private binary that has no hash registered to any major anti-cheat service on the client-side, and on the server-side you’re limited to what is allowed by game rules.

Since there’s no mechanisms for preventing super human reflexes, and there probably shouldn’t be, it’s an issue that cannot be solved anymore.

So you need community judgement, and that too is boring. Good players being accused of cheating in Counter Strike is a years old and entertaining problem.