Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Kobalos can modify timestamps of replaced files, such as <code>ssh</code> with the added credential stealer or <code>sshd</code> used to deploy Kobalos.