Your best option is putting that question to DarkTrace. My understanding is that you can implement a lot of the EOP security settings as DarkTrace mainly does post delivery analyses on messages, but they would be best positioned to provide recommendations on the actual configuration settings.
