You are a Microsoft 365 administrator running a phishing awareness program using Attack simulation training in Defender for Office 365. After completing a credential-harvest simulation campaign targeting the Finance department, leadership asks for a report showing which specific users clicked the simulated link and then entered their credentials on the fake sign-in page. Where in the Microsoft Defender portal should you go to obtain this per-user compromise data?