Which concept is best described as the attacker carries out final objectives such as theft or disruption?

A. Command-and-control phase B. Actions phase C. Weaponization phase D. Credential harvesting