Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: HAWKBALL has leveraged several Windows API calls to create processes, gather disk information, and detect debugger activity.