From Microsoft documentation: Mailbox restores inherently restore only changed items such that current items that remain unchanged since the desired prior restore point won’t be modified or overwritten. Thus, mailbox restores follow a roll-forward process

To restore everything back to a chosen time, choose the last restore point before that time.

Given you deleted some inbox items: Am I right that the restore won’t bring them back to the inbox as they are still present in the deleted items folder (“a refile to another folder doesn’t affect the item status”).

How can I restore the complete mailbox to a state before a malicious attacker deleted all/some items from various folders?

Thanks.
Max.