AntiVirus Custom Report - Malware

[Ahmed_Fouad]

Hello, in Security , privacy & compliance malware report show number of outbound emails, and when I check the details tablet its showing under directionality is Originating instead of outbound!!!! 

the sender address not from our organization but in report show outbound, anyone can explain this what's mean?

[#2]

Hard to tell without looking at the actual data, best open a support case and ask for detailed investigation.

[#3]

I was did that, and  they response "when the mail flow includes multiple servers before EOP the directionality changes to Originating since the server that sent the email to EOP is one of the servers of our organization", but my confuse here that why a few of the malware emails in the report has been sent to EOP and not the all?  @Vasil Michev