Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: MuddyWater has used one C2 to obtain enumeration scripts and monitor web logs, but a different C2 to send data back.