has established persistence through the use of a WMI event subscription combined with unusual living-off-the-land binaries such as `cdb.exe`.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has established persistence through the use of a WMI event subscription combined with unusual living-off-the-land binaries such as `cdb.exe`. ### Response: T1546.003.