Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: During C0027, Scattered Spider accessed Azure AD to download bulk lists of group members and their Active Directory attributes.