Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Some TrickBot samples have used HTTP over ports 447 and 8082 for C2. Newer versions of TrickBot have been known to use a custom communication protocol which sends the data unencrypted over port 443.