Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Chimera has used legitimate credentials to login to an external VPN, Citrix, SSH, and other remote services.