Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT5 has modified legitimate binaries and scripts for Pulse Secure VPNs including the legitimate DSUpgrade.pm file to install the ATRIUM webshell for persistence.