Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: TinyTurla has mimicked an existing Windows service by being installed as <code>Windows Time Service</code>.