Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: KONNI has duplicated the token of a high integrity process to spawn an instance of cmd.exe under an impersonated user.