Hello,
Well, in addition to having established which base image used, you have checked which other components have been added, for example the so-called "vendor add-ons", certain VIBs are specific, on some of my HOSTS I only use add-on components as additional components the specifically necessary drivers which but then I add only those software components that I need, so if someone wants to know what "I actually have running" they have to find it, for example from the version / name of the drivers in use .
I can't know what the person who updated those machines did, they may have originally installed the systems with a custom image and then updated them with the standard one without adding the vendor's add-ons. But if you allow me, it seems reasonable to you that no one knows what was installed on those systems.
Regards,
Ferdinando