Emails and collaboration data (e.g. Teams, Slack, Zoom) are ingested and parsed in real time. Key attributes like headers, content, routing, and authentication signals are extracted to form the raw dataset for analysis.
A Guide to the Multi-Layered AI in Darktrace / EMAIL
See how multi-layered AI detects email threats traditional tools miss
Built on over a decade of operational AI research, this guide breaks down the multi-layered AI powering Darktrace / EMAIL™ – from social graphing to autonomous response – and explains how it detects sophisticated threats across email, messaging, and accounts in real time.
Layer 1: Data Gathering
Layer 2: Social Graphing
AI maps how users communicate across the organization. It builds dynamic peer groups based on real behavioral relationships, not static roles or assumptions – including identifying external facing mailboxes and VIP mailboxes (that will have different risk profiles).
Layer 3: Metric Calculation
Thousands of behavioral and structural metrics are generated per email. These include signals like tone, exposure, spoof likelihood, PII presence, and shifts in user behavior.
10,000
Darktrace customers













































Vos données. Notre IA.









