Given that there’s evidence of the attacker replacing their tools after gaining credentialed access and how long the supply chain has been in place, it’s going

Given that there’s evidence of the attacker replacing their tools after gaining credentialed access and how long the supply chain has been in place, it’s going to be difficult to rule out compromise if you’re a SolarWinds customer. Logs that would record relevant activity of the trojan likely won’t go back all that long.