How to disrupt attackers and enable defenders using resilience

Expel's "Resilience" whitepaper explains an MSSP approach that goes beyond counting alerts by identifying root causes of security events, producing prioritized recommendations that either disrupt attackers or enable defenders, and supplying data-driven "tear sheets" to justify remediation to stakeholders; the document is advisory/marketing in nature and uses a macro-based phishing compromise as an illustrative example rather than providing a technical incident or malware analysis.