1. A computer-implemented method of providing cybersecurity training to a user, comprising: by one or more processors of a cloud-based system, generating a command to present a user with a mock attack situation; by a sensor device, sensing an action of the user when using an electronic device in response to the mock attack situation, wherein the sensor device comprises at least one of the following: a USB sensor device configured to detect that the user has connected a USB device to the electronic device, or a Wi-Fi sensor device configured to detect that the user has connected or attempted to connect the electronic device to a Wi-Fi access point; by the one or more processors of the cloud-based system, using data from the sensor device to determine that, in response to the mock attack situation, the user has performed an action that indicates a need for the user to receive a cybersecurity training intervention relating to the performed action; and by the one or more processors of the cloud-based system, generating a command to deliver the cybersecurity training intervention to the user via an electronic device.