Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Dipsind can be configured to only run during normal working hours, which would make its communications harder to distinguish from normal traffic.