It's pretty much like CA's foulplay detector or whatever you call it.
Anything from partially in walls,in areas you shouldn't be in,and doing higher damage or having farther range will trigger it.
Xtrap files? I doubt it. Seems as though it'd be more logical if it was doing with CF's client.