Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Rocke has looked for IP addresses in the known_hosts file on the infected system and attempted to SSH into them.