@GossiTheDog

I am still trying to figure out whether I should assume breach by default or whether I am fine checking manually for intrusion.

The main primary systems and client facing stuff just doesn't use php, so we kinda dodged a bullet.