Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Cyclops Blink can rename its running process to <code>[kworker:0/1]</code> to masquerade as a Linux kernel thread. Cyclops Blink has also named RC scripts used for persistence after WatchGuard artifacts.