Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Bankshot grabs a user token using WTSQueryUserToken and then creates a process by impersonating a logged-on user.