Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: LAPSUS$ has used compromised credentials and/or session tokens to gain access into a victim's VPN, VDI, RDP, and IAMs.