It's quite a mess indeed. There's obviously a contemporary movement that all your systems should be rebuildable by code, which would make getting the systems b

It's quite a mess indeed. There's obviously a contemporary movement that all your systems should be rebuildable by code, which would make getting the systems back into a trusted state (assuming you trust other layers / your code) a lot easier. Obviously this doesn't help if your data is already messed up, if firmwares are hacked, and if your code itself hasn't had te rigour to be trusted, but it's a hell of a lot better position than "scan, remove, forget".