@billford The reason you are not able to see the MailMalwareDetail report is because it is not yet supported by the Office 365 app for Splunk, even though it is available via the admin reporting web service. We do not yet have commitments on adding this report, but the project is open source https://github.com/Microsoft/o365rwsclient and we accept contributions from anyone. Having said that, we have one contributor that is looking at the Mail reports, so it might come soon. Thanks. Julien ... View more