You are a Microsoft 365 administrator using Attack simulation training in Defender for Office 365. Two weeks ago you launched a credential-harvest simulation targeting 1,200 users, and training was automatically assigned to users who were compromised. Leadership now asks you to identify which users were assigned training but have not yet completed it, so managers can follow up. Which report or view should you use to obtain this information most directly?