Defending Against Ransomware Attacks with Resilient Incident Response