Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BLACKCOFFEE uses Microsoft’s TechNet Web portal to obtain a dead drop resolver containing an encoded tag with the IP address of a command and control server.