can rename its running process to [kworker:0/1] to masquerade as a Linux kernel thread.  has also named RC scripts used for persistence after WatchGuard artifacts.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: can rename its running process to [kworker:0/1] to masquerade as a Linux kernel thread.  has also named RC scripts used for persistence after WatchGuard artifacts. ### Response: T1036.005.