This may help people, so sharing my methodology

In my running config I have a simple Demo taking script

Scripts called rec_demo.cfg and is

// Record DEMO
seta r_demo_1 "set r_demo vstr r_demo_2;g_synchronousClients 1;record;g_synchronousClients 0"
seta r_demo_2 "set r_demo vstr r_demo_1;stoprecord"
set r_demo vstr r_demo_1
bind F5 "vstr r_demo"

In my autoexec.cfg I call

//In this file you can do settings that will be executed everytime Urban Terror is started. It will not get overwritten.
//Lines starting with // are ignored.
exec rec_demo.CFG
exec comms.cfg

(FWIW comms.cfg is my old radio commands config .. allows any radio message with only 2 keys on the keypad ie key 96 does a "No Problem".. happy to share this as well if folks want it)

So to take a demo I drop to spectator and hit F5 to toggle demo on/off

I then have a COMPLETE separate copy of my UrT folder for "videos" (protects any configs etc) .. I copy the demo across to the "video" folder

This folder has an Autoexec.cfg of

//In this file you can do settings that will be executed everytime Urban Terror is started. It will not get overwritten.
exec nexumovie_v2.cfg

and I have NexMovie script loaded from herehttp://www.urbanterror.info/forums/topic/19850-nexus-movie-config-v2-beta/

I watch a suspect Hacker at least 2 times : First as a "normal" Demo at normal speed and once slowing down areas of interest . I ALWAYS use headphones and turn them up and listen carefully as using your ears and brain are often equated to "wall hacker" ..

After watching twice I turn on shownormals as I believe if you watch a video first time with shownormals on you will jump to conclusions to early

After that if and only if I truly suspect a hacker I share it with a fellow ref / admin for agreement / discussion

If its still a "may be possibly but unsure" . I rename it to have player name / date and keep it as later evidence

Best GrandPa

Woah great tutorial. I'll make it a sticky, it'll help lot's of guys
NICE ONE!!