Graphus performs a deep threat analysis of all interactions from untrusted or spoofed identities. If the communication includes an attachment then the attachment is analyzed for malicious behavior. If it is found to be malicious then the email is quarantined and alerts are generated.