Is that a normal perception check? Or actual study in detail type check?
I'd like to go down into the weeds a bit here... I already a gave pure rules answer
above.
Ok so you're playing a Technomancer. You have a well-warranted fear that if someone realizes your status, it might cause trouble. At least from the 5e lore, the Matrix is built/maintained on the pureed brains of Technomancers, and you'd hate for some corp to suck your soul (literally) to power a new host somewhere. Good news though, is it's actually pretty hard to suss that detail out about your icon (since it takes 5+ net hits)
So, you're hacking a corp host because of course you are. That's your job on the team. You're going silent because you don't want to kick off alarms that could tip off the physical, on-site security. While you're having your way with the host, Patrol IC and/or Spider will be periodically trying to spot you. Should they succeed by 5+ hits, not only do they spot you, they simultaneously realize you're a TM, to boot. Should they succeed on 1-4 net hits, they see you and can learn anything the GM deems appropriate. 5e had a big long (and inclusive) list of viable details that can be learned, like what program(s) are running, what the most recent matrix action was, etc. 6e replaced that whole list, and how many each detail would take to learn, with GM handwaivium. Part of the paradigm shift from 5e to 6e, you see. In the case of Technomancers, seeing that the silent running hacker is running 0 programs... is kind of a tell. Kind of uncool for a strong hint the target is a TM to be learned on 1 hit when it takes 5 hits to know, is it not? So in 6e what programs you (don't) have running might take 4 hits in the context of a TM, but I might say it's only 2 (or maybe even 1) hit for a conventional decker. GM fiat baby. Of course, if IC/Spider sees the hacker, the detail of whether the target is or is not a TM is probably not very important in that moment. But if they really, really want to know, they can successively try to spot you during cybercombat. Rather than, you know, engaging you in cybercombat. Don't see that as a likely outcome... unless they're really really looking for TMs for some reason.
What about when you're not running silent? Like, probably much of the time. Especially during downtime. Can't engage in social media/matrix gaming when you're running silent, at least not very well! So let's say you're in a Tweeter matrix chat room with about 1 million other users. When you're not running silent, the other million Tweeter users can all see you. But, you're literally 1 in a million icons. Who's gonna spend time inspecting that many personas? Noone, that's who. You can be "automatically spotted" since you're in the same host as the rest, but unless someone's actually rolling they can't have net hits so *I'd* say in a context like this, even with 1 million people spotting you noone hits 5+ because noone cares to go through the bother of examining you specifically. But when you troll someone, maybe then they're all "who the frag is this drekhead" and they matrix perception you after reading your hilarious comment. Since you're not running silent, you're automatically "spotted". However, if they want to learn details, there's still the opposed roll. If they get 5+ hits, then not only do they get the automatic spot, they can learn your vulnerable secret. If they only get 1-4 hits, they can learn other details that could be plausibly discerned* but not that you're a TM.
*
the 5e list of details that were given for matrix perception (not an inclusive list, so you could learn other things too with GM permission)
The most recent edit date of a file.
• The number of boxes of Matrix damage on the target’s
Condition Monitor.
• The presence of a data bomb on a file.
• The programs being run by a persona.
• The target’s device rating.
• The target’s commode.
• The rating of one of the target’s Matrix attributes.
• The type of icon (host, persona, device, file), if it is using a
non-standard (or even illegal) look.
• Whether a file is protected, and at what rating.
• The grid a persona, device, or host is using. (technically obsolete for 6e, but I'd certainly allow someone to learn which matrix service provider the target is using/hacking, if any)
• If you’re out on the grid, whether there is an icon running
silent within 100 meters.
• If you’re in a host, whether there is an icon running silent
in the host.
• If you know at least one feature of an icon running silent,
you can spot the icon (Running Silent, below).
• The last Matrix action an icon performed, and when.
• The marks on an icon, but not their owners. (a comparable 6e context, since there are no marks, is who has user/admin access on the icon)
Clarifying my question on perception test...
If you search for hidden icons, does a success merely spot them and you must then spend a second perception to gain info? Or roll high enough to spot hidden icon and net hits past the stealth(silent, phantom, whatever the your using threshold number), may give you info?
Example: Bob the techno is running silent. Spider does a matrix perception check to spot hidden icons. Spider rolls 8 hits, Bob rolls 3 hits. Does Spider merely see that Bob is hidden (and then has to make a separate analyze icon(books words...), or do the extra 5 hits carry over to gain useful info about Bob being a techno?
Yes, any time you have net hits on a matrix perception test, you can learn anything the GM feels appropriate based on those net hits. Again in 5e the paradigm was 1 detail per net hit, so each detail ended up "costing" 1 hit to learn and you could ask which ones you wanted. Can do it the same way in 6e, but it's much more free form. GM decides how much info you get, whether it's the info you specifically want or something else they'd rather reveal... GM has final decision.