Glossary: Threat Vectors: Files, Networks and Endpoints

session revocation

Also written: revoke sessions, sign out of all sessions

Ending every active session for an account, forcing every browser to log in again. After token theft it is the key step, because resetting only the password may leave the attacker's session alive.