Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: DarkGate creates a local user account, <code>SafeMode</code>, via <code>net user</code> commands.