Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: CreepySnail can use PowerShell for execution, including the cmdlets `Invoke-WebRequst` and `Invoke-Expression`.