Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Cobalt Group has added persistence by registering the file name for the next stage malware under <code>HKCU\Environment\UserInitMprLogonScript</code>.