The request report in Anti-spam doesn't give an option to display RFC5322 Body Sender. It displays only RFC5321 Envelope Sender.
Email security cloud
The product offers by design only visibility of Envelope From
The only workaround for this limitation is to change action of Anti-spam from "Blocked and deleted" to "Quarantine" and from Email security cloud quarantine portal there is possibility to display Body From.
The exact steps are described under
Configuring Body Sender Column in the Email Security Cloud Quarantine Portal