Which of these are O365 ATP attack simulator capabilities?

Which of these are O365 ATP attack simulator capabilities? (Choose three.)
A. Malware outbreak
B. Spam overrun
C. Spear phishing
D. Brute force password
E. Rainbow table password
F. Password spray