If someone with 'administrator' authority has not logged in since two months ago then they could NOT have done any malicious acts this week. Correct?

I can rule them out?