Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: OilRig has used macros to verify if a mouse is connected to a compromised machine.