An analyst has been tasked with providing a report that can be used to prioritise investigations based on a user's attack index score. Which report would be most suitable for this purpose?