Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Darkhotel has used malware that repeatedly checks the mouse cursor position to determine if a real user is on the system.