It's also a question of hygiene: restoring a system that can be trivially cracked again a few days later, would be stupid. So you have to first understand what

It's also a question of hygiene: restoring a system that can be trivially cracked again a few days later, would be stupid. So you have to first understand what failed, then restore only bits that you know are safe. This might not be trivial.