Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Lazarus Group keylogger KiloAlfa obtains user tokens from interactive sessions to execute itself with API call <code>CreateProcessAsUserA</code> under that user's context.