join.me

First step would tell the hacker in message in game to get in teamspeak. Like this. Get in ts (name) (tsip)
Secondly you tell them to open join.me and send you the link
Thirdly you have to tell them to open f3 in minecraft.
Fourth step would be to tell them top re-open minecraft and go to profile editor. (if they do not have the hacks active u don't ban them)
Fifth step check what version they have on bottom right corner near profile name. And also go to edit profile and look at all his versions.
Sixth step would be to go to files and search the recent searches.
Seventh step go to %appdata% and look at his files. (MODS versions etc.)
Eight step tell him to install voidtools.
9th step tell him to search vape, harambe, ghost, Spook. IF HE HAS ANY OF THIS BAN FOR 14 DAYS AKA GHOST CLIENT.