3 ms·
Not if they don't have the passwords and 2FA devices to access company resources from that machine, and all of the sessions are expired.
by hannasanarion 3y ago
Not if they don't have the passwords and 2FA devices to access company resources from that machine, and all of the sessions are expired.
- GoblinSlayer 3y agoIf all sessions expired, then the user doesn't have access to information either - same access as the attacker. There are cached copies of emails too.