Comment by lambdaone

Perhaps if those logs were streamed to a non-compromised machine and stored there