Installed applications can tell IT what software is installed on individual computers. IT usually doesn't care unless something could harm the computer or network... or until some higher up with nothing better to do tells them to do a search for someone like this.
I'm in IT and even I use a mouse jiggle app just so Teams doesn't show I'm away constantly. Even when I am working on another program, Teams can show the away status which annoys me.
Not everybody who uses it does it to goof off. Micro-managing is so stupid. There are other ways of knowing your employee is doing work.
Teams will show you as away even if you are watching a security training video or reading a long email..or waiting for a bunch of dataflows to refresh. It's a really bad way of calculating if someone is away.
I always use the browser versions (partly because I don't like installing things, and partly because I run Linux), so it pretty much always shows me away. And I don't care.
I'm also in IT and also using a jiggler.. lol. My jiggler shows up as a mouse in device manager. So that's why I ask the question. I switch my thunderbolt connection to another machine, so OS will just see a mouse disconnect/reconnect basically...
Unless they're monitoring my screen and seeing the mouse go one pixel up then down, I don't know how they accomplished it. Maybe by monitoring at an OS level which applications are in focus and for how long? How many key presses/mouse clicks in a certain time period?