Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Carberp has removed various hooks before installing the trojan or bootkit to evade sandbox analysis or other analysis software.