Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ROKRAT can use `VirtualAlloc`, `WriteProcessMemory`, and then `CreateRemoteThread` to execute shellcode within the address space of `Notepad.exe`.