Duration of the history window in milliseconds — the elapsed time between the oldest and newest snapshot used in the analysis.
The stable device identifier that was analysed.
Aggregate anomaly score in [0, 100]. Higher values indicate that the
incoming fingerprint is more anomalous relative to this device's baseline.
Scores ≥ 60 warrant investigation.
Qualitative classification of the detected drift pattern.
Number of historical snapshots used to compute the baseline.
Fields whose z-score exceeded the suspicious threshold, sorted by descending z-score.
Full result of a DeviceManager.analyzeDeviceDrift call.