DKIM (DomainKeys Identified Mail) uses digital signatures to help verify that an email has not been tampered with. In phishing analysis, it is checked alongside SPF and DMARC to identify authentication failures. section 7.1.3
Checking a suspicious email
Copy an email’s source text and headers into an AI assistant and ask whether it shows signs of phishing. The analysis can flag DKIM, SPF, or DMARC failures, alongside suspicious sender information such as a supposed SharePoint message using an unofficial domain. section 7.1.3
Figure 7.2 Finding the source text and headers of an email in Outlook for Mac and PC
Locate the email’s source text and headers before analyzing its authentication results. section 7.1.3
Figure 7.3 M365 Copilot analysis of email source text
Review an example of M365 Copilot analyzing pasted email source text. section 7.1.3
