SEAS classifies emails into four categories:
- Likely Safe
- Inconclusive
- Suspicious
- Malicious
These classifications are determined by the weighing of individual heuristics and indicators within the email. The combination of which is then used to determine the final classification.
A classification of Inconclusive is possible when there are insufficient indicators in the email to make a weighed value judgement. e.g. if the email is relatively empty. Or the balance of positive and negative indicators balance out to a neutral classification.
This is stated in the SEAS report, as well as the SEAS Email notification:
This email was identified as inconclusive because although it did not contain any strong malicious indicators, it also lacked the required indicators to declare it as being safe.
As an example, unsolicited promotional emails can fall into the Inconclusive category. As they neither present suspicious attributes, nor show association with a trusted source or recipient, and simply link to external resources.
Regardless, even if the classification is Inconclusive, any indicators identified are listed in the SEAS report/Email notification to help the end-user make an informed decision on how to handle the email.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article