CT-AI: Certified Tester AI Testing Version 2.0

A company uses a spam filter to try to identify which emails should be marked as spam. The filter creates detection rules that cause a message to be categorized as spam. An attacker wants every message internal to the company to be categorized as spam. Therefore, the attacker sends messages with obvious red flags in the email body and alters the from portion to make the emails appear to have been sent by company members. The testers plan to use exploratory data analysis (EDA) to detect the attack and use this information to prevent future adversarial attacks.

How can EDA be used to detect this attack?