@Brian, thanks for your suggestions but this wouldn't be possible. I mean, yes, the vcmp client certainly has a function to get running processes but we have no access to it from the scripts. If you're suggesting that we'd have to manually patch the client (which is no easy task without the source code) that wouldn't work either because this altered version the client would need to be installed and executed by all players and of course hackers are not going to go for this
vito's suggestion to get the running processes might work but doesn't seem very practical to me. We would need to crash players on purpose just to get that crash log so they wouldn't really be able to play. Unless we're talking about soft client side crashes (the ones that don't fully kill the game but generate a crashlog), but I'm not sure if those crashes trigger the server side OnPlayerCrashDump event, I haven't tested. But even if they did tho, this could be easily bypassed by players if they simply changed the .exe name of the hack file. Measuring mouse movement is possible after each shot on the client although this would probably catch alot of false positives. One could also check if the shot hit the body of the other player (I'm aware there's aready a script that does this) but this wouldn't really detect the aimlock version that has lead aim. Because those shots don't hit the body.
@Zkq
This picture alone proves usage:
"don't tell anyone that I use aimlock"
Explain that.