Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FunnyDream has established persistence by running `sc.exe` and by setting the `WSearch` service to run automatically.