Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BUSHWALK can embed into the legitimate `querymanifest.cgi` file on compromised Ivanti Connect Secure VPNs.