Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: KONNI has modified registry keys of ComSysApp, Svchost, and xmlProv on the machine to gain persistence.