machine learning for malware detection

Hello experts,

I have a question about machine learning for malware detection.
How does "machine learning" work at Sophos? How can you imagine that? I see many analyzes in the reports from Sophos labs intelix that draw on an enormous database. How is this different from data mining? Ultimately, an assessment is suggested to me based on this database. Where can I see the "learning success" of machine learning?
I'm currently investigating the AI support of Sophos Intercept X as part of a master's thesis.
I would be happy to start a discussion about machine learning here. We are a Sophos customer ourselves and, in addition to the UTM, we also use the XGS together with Intercept X.

Many greetings