Product
The creation of a new MFA registration in PingID could indicate an attacker attempting to maintain persistence after compromising a user account.