IndigoZebra ensures their presence by setting up scheduled tasks, allowing them to regain access even after system reboots. A scheduled task was created by the attacker to execute a malicious script periodically.