user account persistence

Malware and threat actors may use user accounts as a form of persistence.

This may involve using an existing account without modification in the event of stolen credentials, modifying an existing account, or adding a new account.

---