Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: LITTLELAMB.WOOLTEA can check the type of Ivanti VPN device it is running on by executing `first_run()` to identify the first four bytes of the motherboard serial number.