Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Kobalos is triggered by an incoming TCP connection to a legitimate service from a specific source port.