Darktrace for Email: Secure your inbox with AI

Darktrace for Email is the world’s first Self-Learning AI email security solution. By learning the normal ‘pattern of life’ for every user within Microsoft 365, the technology builds an evolving understanding of the human behind email communications.

While legacy email security tools look for known email attack vectors, Darktrace for Email is able to identify novel email threats that get through, including sophisticated phishing, Business Email Compromise (BEC) and supply chain attack (or Vendor Email Compromise).

Self-learning

Single, unified AI platform that provides complete coverage

Understands the human

Every user analyzed for behavioral modeling

Proportionate response

Catches costly attacks missed by legacy security tools

Installs in 5 minutes

Virtual or hardware deployment available

Advanced spear phishing

Supply chain attack

Spoofing and solicitation

Employee account takeover

Spear phishing attacks typically aim to deceive employees into clicking malicious links or attachments in an email, aiming to harvest credentials or deploy malware into an organization.Unknown correspondentNobody in the organization has had previous contact with the sender.Unusual recipient groupThe email chain was sent to a group of contacts within the organization not usually associated with one another.Suspicious attachmentIndicates behavior consistent with an attempt to deliver a payload via an attachment.By hijacking the account of a trusted contact in your supply chain, threat actors can easily gain the trust of a user and coax them into clicking a malicious link, or even wiring money out of the business.False replyDarktrace for Email can distinguish genuine replies from fake ones, whereby a manufactured email thread is pasted below the offending email.Suspicious URLNeither the recipient nor anyone in their peer group has visited the suspect domain before, raising a high-confidence alert.Suspicious locations of linkThe same suspicious URL appears in multiple locations within the email, including behind this misleading hyperlink.Spoofing attacks usually involve an attempt at impersonation, where disguised attackers prompt the recipient to reply, with a goal to either solicit a fraudulent payment or gather intel on an organization.Unusual correspondentNeither the recipient nor anyone in the organization has had any previous interaction with this sender.SolicitationA time constraint invokes a sense of urgency, a sign of possible solicitation attempt.Suspicious linkNeither the recipient nor anyone in their peer group has visited the suspect domain before, raising a high-confidence alert.Employee’s email accounts can be compromised either through fake login pages that record keystrokes, or data leakages containing credentials. Once inside, attackers may pillage an inbox for valuable information, or launch a string of malicious emails from the compromised account.Unusual email processing rulesThis email was sent just minutes after unusual inbox processing rules were created on the account.Unusual login locationDarktrace’s SaaS Module has picked up on the unusual login location and flagged it to Darktrace for Email.Unusual outbound attachmentIndicates behavior consistent with an attempt to deliver a payload via an attachment.

Installed in minutes.

Uses Microsoft’s API.

No MX changes required.

Darktrace for Microsoft 365 looks at raw emails and account activity data to detect sophisticated email threats and account takeovers (ATOs).

Featured Blog

Comparing different AI approaches to email security

AI has fundamentally changed email security in recent years, but there is significant distinction to be made in the application of the technology which may determine genuine and future-proof protection from a backward-looking model incapable of catching novel attacks.

Darktrace for Microsoft

Darktrace for Email: Secure your inbox with AI

Featured Blog

Technology

Products

Resources

Company