Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: AvosLocker has used a variety of Windows API calls, including `NtCurrentPeb` and `GetLogicalDrives`.