ConnectWise attacker planted more app credentials
Trace added application credentials and changed privileges, then check what access remains after containment.
Replay3:38 Narrated visual walkthrough
Use the vendor credential
Add more credentials
Remove the added access
