Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FoggyWeb can receive additional malicious components from an actor controlled C2 server and execute them on a compromised AD FS server.