I looked into how SnapChat does it, it's pretty simple: http://blog.chpwn.com/post/38491252231
How would you detect the lack of WillEnterBackground/DidResignActive to avoid false positives? Just set a timeout and send a "screenshot!" notification if the timeout expires without going to background?