You don’t just rebuild the VMs. You burn the DC and start again from scratch. That’s exactly what Cloudflare had to do: https://blog.cloudflare.com/thanksgiving-2023-security-incid...