Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN8 has used a malicious framework designed to impersonate the lsass.exe/vmtoolsd.exe token.