Once they're in, often professionals will create many forms of hidden access and then remove evidence of the initial breach.