Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: OilRig has used <code>net group /domain</code>, <code>net group “domain admins” /domain</code>, and <code>net group “Exchange Trusted Subsystem” /domain</code> to find domain group permission settings.