Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Metador has established persistence through the use of a WMI event subscription combined with unusual living-off-the-land binaries such as `cdb.exe`.