Determine if FortiGate config is compromised

Hi FGT admins

There are some config elements we usually check in order to see if our FGT config is compromised, like check if any suspicious admin account, suspicious VPN account, suspicious suspicious rule, ... etc.

But is there any complete official procedure or to check it?