Patent ID: 11949713
Assignee: ABNORMAL SECURITY CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 21:
22. A system comprising:
a processor configured to:
determine, via an application programming interface, that a first email is present in a mailbox to which employees of an enterprise are able to forward emails deemed suspicious for analysis, and in response to determining that the first email is present in the mailbox, determining whether the first email is representative of a threat to the enterprise based at least in part by applying a trained model to the first email; and
in response to establishing that the first email represents a threat to the enterprise:
generate a record of the threat by populating a data structure with information related to the first email; and
apply the data structure to inboxes of a plurality of the employees to determine whether the first email is part of a campaign, and in response to determining that the first email is part of a campaign, applying the data structure as a filter to inbound emails addressed to the employees; and

a memory coupled to the processor and configured to provide the processor with instructions.