Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: For Operation Ghost, APT29 registered domains for use in C2 including some crafted to appear as existing legitimate domains.