Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Remsec harvests plain-text credentials as a password filter registered on domain controllers.