Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Torisma is only delivered to a compromised host if the victim's IP address is on an allow-list.