Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Crimson can determine when it has been installed on a host for at least 15 days before downloading the final payload.