A technique that inspects content within a file, email, application, etc. to classify it while at rest (in storage), in use (during an operation), or in transit (across a network).