Serious question: How do you know it was using AI agents? What logs distinguish it from a human?

I see this claim a lot and while I don't doubt AI is being used for this, I have a hard time believing every breach has a smoking gun showing it to be an AI assisted attack.