What we can tell from what the Paris attackers did—and didn’t do