9. The computing device of claim 7 , further comprising determining logic, executed by the processor, for determining an email template for each of the machine-generated emails.
7. A computing device comprising: a processor; a storage medium for tangibly storing thereon program logic for execution by the processor, the program logic comprising: identification logic, executed by the processor, for identifying a plurality of email templates, each email template corresponding to characteristics of a received machine-generated email, the characteristics of the received machine-generated email relating to static data of the machine-generated email; and generation logic, executed by the processor, for generating a template causality graph by analyzing the plurality of email templates to determine a statistical causality between templates of the plurality of email templates, the determining of the statistical causality between templates comprising determining that a first received machine-generated email associated with a first template is a result of a second received machine-generated email associated with a second template.