Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Blue Mockingbird has used mofcomp.exe to establish WMI Event Subscription persistence mechanisms configured from a *.mof file.