| ConfidenceScore |
Overall confidence score that the detected media is synthetic |
Double |
| ContentDurationSec |
Duration of the suspicious content segment in seconds |
Double |
| DetectedUserDisplayName |
Display name of the user flagged as using synthetic media |
String |
| DetectedUserIdType |
Type of identifier to interpret DetectedUserId; possible values: PSTN (for phone number), Enterprise, or Consumer or Bot |
String |
| DetectionId |
Unique identifier for this detection event |
String |
| DetectionProviderName |
Name of the detection bot or application that identified the synthetic media |
String |
| Detections |
Detailed results from each detection model; each entry includes model name, content type analyzed, detection tasks, time segment, and confidence score |
Object |
| IsMalicious |
Indicates whether the synthetic media was likely used with harmful intent (for example, impersonation, fraud, or social engineering), rather than benign use (AI-generated avatars or accessibility tools) |
Boolean |
| IsRealTime |
Indicates whether the detection happened live during the session (true) or after as a post-session analysis (false) |
Boolean |
| Modality |
Type of content analyzed; possible values: Audio, Video, Multimodal, or Image |
String |
| PrimaryModelTasks |
The primary types of synthetic media detected |
String |
| Severity |
Severity of the detection; possible values: High, Medium, or Low |
String |
| SourceContextName |
Name of the source context (for example, name of the meeting, file, or email) |
String |
| SourceContextType |
Context of the source (for example, Scheduled meeting, adhoc meeting, recurring meeting} |
String |
| SourceContextUrl |
URL of the source context (for example, URL of the meeting or file) |
String |
| SourceId |
Unique identifier of the source (for example, call ID for meetings or calls, network message ID for emails, and file ID for files) |
String |
| SourceSystem |
|
String |
| SourceType |
The Microsoft 365 application where the detection event occurred |
String |
| TenantId |
|
String |
| TimeGenerated |
|
DateTime |
| Timestamp |
Date and time when the activity was recorded |
DateTime |
| Type |
|
String |