Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Sardonic can use a WMI event filter to invoke a command-line event consumer to gain persistence.