A SOC analyst receives an alert in Microsoft Defender XDR indicating that several users received emails from an external sender containing a suspicious URL. Management wants to know the full scope of the campaign: which internal recipients received the messages, how many clicked the URL, and whether any messages are still sitting in user mailboxes. The analyst needs a single investigation tool in Defender for Office 365 that lets them view delivery details, URL click data, and take remediation actions such as soft delete directly against the matching messages. Which tool should the analyst use?