Security Budgets Explained: Investing Smart in Offensive Cybersecurity