If I worked at 343,
I would check stats pre and post anti cheat, anti geofiltering, and check for outliers.
You could very based upon huge gaps in performance create “the list”.
It’s up to them what they do with this list but it’s like automatically identifying all possible cheaters.
Just a thought…