Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BADHATCH can obtain logged user information from a compromised machine and can execute the command `whoami.exe`.