Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: TrickBot has been known to use PowerShell to download new payloads, open documents, and upload data to command and control servers.