A security awareness manager at a financial services company wants to run realistic simulated phishing campaigns against employees and automatically assign targeted training to users who click the simulated malicious links. Which Microsoft Defender for Office 365 capability should the manager use?