They know what the bandwidth graph looks like when a full DB replication/dump is in progress.
Since that level of data transfer only occurred once (when they did it), they know the attacker did not actually transfer any data.
Since that level of data transfer only occurred once (when they did it), they know the attacker did not actually transfer any data.
No comments yet.