Glossary: Identity and Access Management

persistence

Ways an attacker keeps access after a password reset, such as mailbox forwarding rules, app consents, API keys or SSH keys. Checking for it is one step in responding to a compromised credential.