Emails and collaboration data (e.g. Teams, Slack, Zoom) are ingested and parsed in real time. Key attributes like headers, content, routing, and authentication signals are extracted to form the raw dataset for analysis.
A Guide to the Multi-Layered AI in Darktrace / EMAIL
See how multi-layered AI detects email threats traditional tools miss
Built on over a decade of operational AI research, this guide breaks down the multi-layered AI powering Darktrace / EMAIL™ – from social graphing to autonomous response – and explains how it detects sophisticated threats across email, messaging, and accounts in real time.
Layer 1: Data Gathering
Layer 2: Social Graphing
AI maps how users communicate across the organization. It builds dynamic peer groups based on real behavioral relationships, not static roles or assumptions – including identifying external facing mailboxes and VIP mailboxes (that will have different risk profiles).
Layer 3: Metric Calculation
Thousands of behavioral and structural metrics are generated per email. These include signals like tone, exposure, spoof likelihood, PII presence, and shifts in user behavior.
Gartner, Magic Quadrant for Email Security Platforms, Max Taggett, Nikul Patel, Franz Hinner, Deepak Mishra, 16 December 2024Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. GARTNER is a registered trademark and service mark of Gartner and Magic Quadrant and Peer Insights are a registered trademark, of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.
10,000
Darktrace customers













































Deine Daten. Unsere KI.









