Resources for Automatic attack disruption

I for one am really excited by this new feature HeikeRitter! It really sets the XDR bar at a new level, where the "R" in "DR" moves from tools for manual SOC response actions to the system taking proactive automatic response actions to block attacker progress and contain the threat! 

We're already hearing from customers how significant badness was prevented in their environment by disruption kicking in quickly and accurately to stop and evolving attack.   

What do other folks here think about this new capability? Have you seen it in action in your environment? Thoughts on where/how it should evolve? Let us know!