No amount of pentesting with tools that are 'available to anyone' will help you with the attacks that aren't invented yet.

MozDef is about incident handling. You still need to do this, even if you do pentesting.