I could use some help figuring out how to completely clean up my compromised instanced because it seems to have been compromised again even after upgrading and rotating my user tokens. I posted a new topic here: Rotating all integration and user API keys on compromised instance