State transit body Transport for NSW (TfNSW) initiated a deep network forensic audit after discovering a secondary perimeter vulnerability that allowed unauthorized database indexing across legacy application directories.