Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: AADInternals can gather encryption keys from Azure AD services such as ADSync and Active Directory Federated Services servers.