I can only imagine, especially if the logging&#x2F;auditing policy was &quot;pretty much non-existent&quot; and you don&#x27;t know how extensive the access was for a given user account (nor how much of that access could have been used in the short window of compromise).<p>If it were SSH access, I&#x27;d call it game over.