cyber.hendryadrian.com
Interesting Stuff · darktrace.com

Darktrace Says Microsoft 365 API Plus Journaling Can Reduce Email Threat-Detection Delays

· Original article ↗

Summary

Darktrace says its API-plus-journaling integration for Microsoft 365 receives messages faster than API-only ingestion, reporting lower median and average latency in customer deployments and recommending the approach for organizations that can use journaling.

Key points

  • API-only integrations may analyze messages after delivery and can experience delays from Microsoft Graph notifications and retries, according to Darktrace.
  • With journaling, a copy of the raw email is received during transport for analysis before the message reaches the inbox.
  • Darktrace’s customer-deployment measurements reported median latency of 0.53 seconds with API plus journaling versus 1.31 seconds with API-only.
  • The company reported a raw mean of 0.75 seconds with journaling versus 21.88 seconds with API-only, attributing the difference to reduced long-tail delays.
  • Darktrace says journaling can operate alongside Microsoft’s native defenses and avoid variability from API notification delivery.
  • The company recommends API plus journaling for speed and reliability, while retaining API-only deployment for organizations unable to use journaling.

Article Details

Topic
Darktrace's API + Journaling deployment approach for faster, more reliable email security in Microsoft 365.

Vendors

Darktrace‍Darktrace / EMAIL offers flexible deployment options, seamlessly integrating with Microsoft 365 and other native providers to protect against advanced threats across email and collaboration channels. Gartner analysts

Products

Darktrace / EMAIL‍Darktrace / EMAIL offers flexible deployment options, seamlessly integrating with Microsoft 365 and other native providers to protect against advanced threats across email and collaboration channels. Gartner analystsExchange OnlineRobustness backed by SLAs: Journaling leverages Microsoft 365’s Exchange Online transport pipeline, which operates under Microsoft’s financially backed 99.9% availability SLA. API notifications, by contrast, areMicrosoft 365 Apps for Enterprise‍Darktrace / EMAIL offers flexible deployment options, seamlessly integrating with Microsoft 365 and other native providers to protect against advanced threats across email and collaboration channels. Gartner analystsMicrosoft GraphSubscribes to Microsoft Graph change notifications

Related Articles