We've Compromised the Domain - Now What?